{"id":"CVE-2019-2958","aliases":["ALPINE-CVE-2019-2958","DLA-2023-1","EUVD-2019-12597","GHSA-jf28-jj52-6jmf","SUSE-SU-2019:2998-1","SUSE-SU-2019:3083-1","SUSE-SU-2019:3084-1","SUSE-SU-2019:3238-1","SUSE-SU-2020:0001-1","SUSE-SU-2020:0024-1","SUSE-SU-2020:0025-1","SUSE-SU-2020:14265-1","openSUSE-SU-2019:2557-1","openSUSE-SU-2019:2565-1","openSUSE-SU-2019:2687-1","openSUSE-SU-2024:10871-1","openSUSE-SU-2024:10872-1","openSUSE-SU-2024:10876-1"],"status":"published","title":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02626,"percentile":0.85595,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-10-16T17:40:56Z","modified":"2026-11-03T06:31:57Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk11","fixed_in":["11.0.5_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openjdk7","fixed_in":["7.241.2.6.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openjdk8","fixed_in":["8.232.09-r0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.241.2.6.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.232.09-r0"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u241-2.6.20-1~deb8u1"}]}],"versions":["7u101-2.6.6-1","7u101-2.6.6-1~deb8u1","7u101-2.6.6-2","7u101-2.6.6-2~deb7u1","7u101-2.6.6-2~deb8u1","7u111-2.6.7-1","7u111-2.6.7-1~deb7u1","7u111-2.6.7-1~deb8u1","7u111-2.6.7-2","7u111-2.6.7-2~deb7u1","7u111-2.6.7-2~deb8u1","7u111-2.6.7-3","7u121-2.6.8-1","7u121-2.6.8-1~deb7u1","7u121-2.6.8-2","7u121-2.6.8-2~deb7u1","7u121-2.6.8-2~deb8u1","7u131-2.6.9-1","7u131-2.6.9-2","7u131-2.6.9-2~deb7u1","7u131-2.6.9-2~deb8u1","7u131-2.6.9-3","7u151-2.6.11-1","7u151-2.6.11-1~deb8u1","7u151-2.6.11-2","7u151-2.6.11-2~deb7u2","7u151-2.6.11-2~deb7u3","7u151-2.6.11-2~deb8u1","7u151-2.6.11-3","7u161-2.6.12-1","7u171-2.6.13-1","7u171-2.6.13-1~deb7u1","7u171-2.6.13-1~deb8u1","7u181-2.6.14-1","7u181-2.6.14-1~deb8u1","7u181-2.6.14-2","7u181-2.6.14-2~deb8u1","7u211-2.6.17-1","7u211-2.6.17-1~deb8u1","7u221-2.6.18-1~deb8u1","7u231-2.6.19-1~deb8u1","7u231-2.6.19-1~deb8u2","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1","7u79-2.5.6-1~deb7u1","7u79-2.5.6-1~deb8u1","7u85-2.6.1-1","7u85-2.6.1-2","7u85-2.6.1-3","7u85-2.6.1-4","7u85-2.6.1-5","7u85-2.6.1-5~deb8u1","7u85-2.6.1-6","7u85-2.6.1-6+deb8u1","7u85-2.6.1-6~deb7u1","7u91-2.6.2-1","7u91-2.6.3-1","7u91-2.6.3-1+sparc64","7u91-2.6.3-1~deb7u1","7u91-2.6.3-1~deb8u1","7u91-2.6.3-2","7u91-2.6.3-3","7u95-2.6.4-1","7u95-2.6.4-1~deb7u1","7u95-2.6.4-1~deb8u1","7u95-2.6.4-2","7u95-2.6.4-3"],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5.0-3.36.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5.0-3.36.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5.0-3.3.3"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5.0-3.3.3"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.241-43.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-3.27.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-3.27.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-3.27.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-3.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-3.30.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.0-30.60.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-27.38.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-27.38.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-27.38.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-27.38.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-27.38.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.55-65.45.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5.0-lp150.2.28.1"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.5.0-lp151.3.9.2"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.232-lp151.2.6.1"}]}],"bundled":17},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.12.0-3.1"}]}],"bundled":95},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-13-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8.0-3.1"}]}],"bundled":95},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.302-2.2"}]}],"bundled":175}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"e-series_santricity_os_controller"},{"vendor":"netapp","product":"e-series_santricity_storage_manager"},{"vendor":"netapp","product":"e-series_santricity_unified_manager"},{"vendor":"netapp","product":"e-series_santricity_web_services_proxy"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"snapmanager"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle corporation","product":"java"}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191017-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2958"},{"url":"https://github.com/advisories/GHSA-jf28-jj52-6jmf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-2958","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192998-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1152856","tags":["report"]},{"url":"https://bugzilla.suse.com/1154212","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193083-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193084-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193238-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1138529","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200001-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1158442","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2996","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200024-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200025-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014265-1/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WCIMAT2F4HXIE6ZIVQQAFTNF3WZ5QK2Y/#WCIMAT2F4HXIE6ZIVQQAFTNF3WZ5QK2Y","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7UPD3ISREA7GUESZ6NQVU7DWRQ66OGDW/#7UPD3ISREA7GUESZ6NQVU7DWRQ66OGDW","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I6ALR2AGAFL63Y6TKSBCMO2DIQNCCY5U/#I6ALR2AGAFL63Y6TKSBCMO2DIQNCCY5U","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2659","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-2958","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2019-10-16T17:40:56Z","modified":"2024-10-01T16:28:29.389Z","updated_at":"2026-11-02T14:20:22.701371Z"}],"euvd":[{"id":"EUVD-2019-12597","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2019-10-16T17:40:56Z","modified":"2024-10-01T16:28:29Z","updated_at":"2026-11-03T00:28:00.970899Z"}],"ghsa":[{"id":"GHSA-jf28-jj52-6jmf","title":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2022-05-24T16:59:05Z","modified":"2023-01-28T05:07:26Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T14:44:31.607605Z"}],"nvd":[{"id":"CVE-2019-2958","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2019-10-16T18:15:30.873Z","modified":"2026-06-17T02:34:55.177Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:31.860711Z"}],"osv":[{"id":"ALPINE-CVE-2019-2958","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2019-10-16T18:15:30.873Z","modified":"2026-11-03T06:31:57.421849483Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"DLA-2023-1","title":"openjdk-7 - security update","status":"published","published":"2019-12-07T00:00:00Z","modified":"2026-03-09T01:20:24.558317Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"openSUSE-SU-2019:2557-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:\n\nSecurity issues fixed (October 2019 CPU  bsc#1154212):\t  \n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2975: Unexpected exception in jjs\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2977: Improve String index handling\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-23T23:22:03Z","modified":"2026-02-04T02:56:33.315028Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2019:2565-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:\n\nSecurity issues fixed (October 2019 CPU  bsc#1154212):\t  \n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2975: Unexpected exception in jjs\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2977: Improve String index handling\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-25T13:29:16Z","modified":"2026-02-04T02:47:54.137762Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2019:2687-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk (jdk8u232/icedtea 3.14.0) fixes the following issues:\n\nSecurity issues fixed (bsc#1154212):\n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2975: Unexpected exception in jjs\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)\n\nBug fixes:\n\n- Fixed build failuers on ARM (bsc#1138529).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-12-15T15:11:34Z","modified":"2026-02-04T03:54:33.157583Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10871-1","title":"java-11-openjdk-11.0.12.0-3.1 on GA media","description":"These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:19.394894Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10872-1","title":"java-13-openjdk-13.0.8.0-3.1 on GA media","description":"These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:43:55.885522Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10876-1","title":"java-1_8_0-openjdk-1.8.0.302-2.2 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:42.093736Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:2998-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:\n\nSecurity issues fixed (October 2019 CPU  bsc#1154212):\t  \n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2975: Unexpected exception in jjs\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2977: Improve String index handling\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).\n","status":"published","published":"2019-11-18T14:17:26Z","modified":"2026-02-04T02:39:04.169534Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3083-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nSecurity issues fixed (October 2019 CPU  bsc#1154212):\t  \n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2975: Unexpected exception in jjs\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2977: Improve String index handling\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).\t  \n","status":"published","published":"2019-11-27T12:20:37Z","modified":"2026-02-04T02:13:51.943381Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3084-1","title":"Security update for java-1_7_0-openjdk","description":"This update for java-1_7_0-openjdk fixes the following issues:\n\nSecurity issues fixed (October 2019 CPU  bsc#1154212):\t  \n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).\n","status":"published","published":"2019-11-27T12:22:25Z","modified":"2026-02-04T03:05:11.491701Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3238-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk (jdk8u232/icedtea 3.14.0) fixes the following issues:\n\nSecurity issues fixed (bsc#1154212):\n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2975: Unexpected exception in jjs\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)\n\nBug fixes:\n\n- Fixed build failuers on ARM (bsc#1138529).\n","status":"published","published":"2019-12-10T09:22:14Z","modified":"2026-02-04T03:53:28.86179Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0001-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\n- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]\n  * Security fixes:\n    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958\n    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975\n    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988\n    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996\n    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981\n    CVE-2019-17631\n","status":"published","published":"2020-01-02T08:47:13Z","modified":"2026-02-04T04:30:50.322794Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0024-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\n- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]\n  * Security fixes:\n    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958\n    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975\n    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988\n    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996\n    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981\n    CVE-2019-17631\n","status":"published","published":"2020-01-07T12:53:18Z","modified":"2026-02-04T02:30:23.594755Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0025-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk fixes the following issues:\n\nUpdate to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU, bsc#1154212)\n\nSecurity issues fixed:\n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2975: Unexpected exception in jjs\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)\n\nBug fixes:\n\n- Add patch to fix hotspot-aarch64 (bsc#1138529).\n","status":"published","published":"2020-01-07T12:53:58Z","modified":"2026-02-04T04:39:48.235185Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:14265-1","title":"Security update for java-1_7_0-ibm","description":"This update for java-1_7_0-ibm fixes the following issues:\n\n- Update to 7.0 Service Refresh 10 Fix Pack 55 [bsc#1158442, bsc#1154212]\n  * Security fixes:\n    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958 CVE-2019-2962\n    CVE-2019-2964 CVE-2019-2978 CVE-2019-2983 CVE-2019-2988\n    CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2019-2973\n    CVE-2019-2981    \n","status":"published","published":"2020-01-08T15:15:20Z","modified":"2026-02-04T03:36:01.459387Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}