{"id":"CVE-2019-4473","aliases":["EUVD-2019-14080","GHSA-qh47-rvff-ggv7","SUSE-SU-2019:14160-1","SUSE-SU-2019:14188-1","SUSE-SU-2019:2291-1","SUSE-SU-2019:2336-1","SUSE-SU-2019:2371-1"],"status":"published","title":"Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use...","description":"Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.","severity":{"version":"3.0","score":8.4,"vector":"CVSS:3.0/I:H/AC:L/A:H/C:H/UI:N/PR:N/AV:L/S:U/RL:O/RC:C/E:U","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0045,"percentile":0.39347,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-427"],"published":"2019-08-05T13:40:15Z","modified":"2026-06-17T02:36:34Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-26.44.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.50-65.42.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-3.24.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-3.24.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.50-38.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12}],"products":[{"vendor":"ibm","product":"java"},{"vendor":"oracle corporation","product":"java"}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=ibm10960422","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/163984","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-4473"},{"url":"https://github.com/advisories/GHSA-qh47-rvff-ggv7"},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914160-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1141780","tags":["report"]},{"url":"https://bugzilla.suse.com/1141782","tags":["report"]},{"url":"https://bugzilla.suse.com/1141783","tags":["report"]},{"url":"https://bugzilla.suse.com/1141785","tags":["report"]},{"url":"https://bugzilla.suse.com/1141789","tags":["report"]},{"url":"https://bugzilla.suse.com/1147021","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-4473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914188-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1122292","tags":["report"]},{"url":"https://bugzilla.suse.com/1122299","tags":["report"]},{"url":"https://bugzilla.suse.com/1141787","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192336-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-4473","description":"Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.","status":"published","published":"2019-08-05T13:40:15.625Z","modified":"2024-09-16T17:28:54.997Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/I:H/AC:L/A:H/C:H/UI:N/PR:N/AV:L/S:U/RL:O/RC:C/E:U","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:20:25.303966Z"}],"euvd":[{"id":"EUVD-2019-14080","description":"Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.","status":"published","published":"2019-08-05T13:40:15Z","modified":"2024-09-16T17:28:54Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/I:H/AC:L/A:H/C:H/UI:N/PR:N/AV:L/S:U/RL:O/RC:C/E:U","level":"high"}],"updated_at":"2026-11-03T00:55:41.41816Z"}],"ghsa":[{"id":"GHSA-qh47-rvff-ggv7","title":"Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use...","description":"Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.","status":"published","published":"2022-05-24T16:52:33Z","modified":"2023-01-31T21:31:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:49:32.359752Z"}],"nvd":[{"id":"CVE-2019-4473","description":"Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.","status":"published","published":"2019-08-05T14:15:12.13Z","modified":"2026-06-17T02:36:34.177Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:05:21.892729Z"}],"osv":[{"id":"SUSE-SU-2019:14160-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\nUpdate to Java 7.1 Service Refresh 4 Fix Pack 50.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n","status":"published","published":"2019-09-04T08:05:57Z","modified":"2026-02-04T02:55:49.672349Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:14188-1","title":"Security update for java-1_7_0-ibm","description":"This update for java-1_7_0-ibm fixes the following issues:\n\t  \nUpdate to Java 7.0 Service Refresh 10 Fix Pack 50 (bsc#1147021).\n\nSecurity issues fixed:\n\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1147021).\n- CVE-2019-4473: Fixed insecure RPATH in multiple binaries on AIX (bsc#1147021).\n- CVE-2019-7317: Fixed use-after-free in libpng, affecting client-libs/java.awt (bsc#1147021).\n- CVE-2019-11771: Fixed insecure RPATH in OpenJ9 on AIX (bsc#1147021).\n- CVE-2019-11775: Fixed failure to privatize a value pulled out of the loop by versioning (bsc#1147021).\n","status":"published","published":"2019-10-04T08:10:04Z","modified":"2025-05-02T04:08:41.402089Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2291-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 40.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).\n","status":"published","published":"2019-09-04T14:48:56Z","modified":"2026-02-04T04:38:30.048658Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2336-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\nUpdate to Java 7.1 Service Refresh 4 Fix Pack 50.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n","status":"published","published":"2019-09-09T11:27:12Z","modified":"2026-02-04T04:36:51.978333Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2371-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 40.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).\n","status":"published","published":"2019-09-12T11:32:19Z","modified":"2026-02-04T03:20:01.110016Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}