Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-9840 (GCVE-0-2016-9840)
Vulnerability from cvelistv5 – Published: 2017-05-23 03:56 – Updated: 2024-08-06 02:59
VLAI
EPSS
Summary
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
30 references
Date Public
2016-09-30 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T02:59:03.590Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2017:1221",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1221"
},
{
"name": "RHSA-2017:1220",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1220"
},
{
"name": "RHSA-2017:3047",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:3047"
},
{
"name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
},
{
"name": "95131",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/95131"
},
{
"name": "RHSA-2017:3046",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
},
{
"name": "openSUSE-SU-2017:0077",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
},
{
"name": "GLSA-201701-56",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201701-56"
},
{
"name": "1039427",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1039427"
},
{
"name": "RHSA-2017:1222",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1222"
},
{
"name": "openSUSE-SU-2017:0080",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
},
{
"name": "RHSA-2017:3453",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:3453"
},
{
"name": "openSUSE-SU-2016:3202",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
},
{
"name": "RHSA-2017:2999",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:2999"
},
{
"name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
},
{
"name": "USN-4246-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4246-1/"
},
{
"name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
},
{
"name": "USN-4292-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4292-1/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/HT208144"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/HT208113"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/HT208112"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/HT208115"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
},
{
"name": "GLSA-202007-54",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202007-54"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-09-30T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-01-06T16:16:02.000Z",
"orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
"shortName": "microfocus"
},
"references": [
{
"name": "RHSA-2017:1221",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1221"
},
{
"name": "RHSA-2017:1220",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1220"
},
{
"name": "RHSA-2017:3047",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:3047"
},
{
"name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
},
{
"name": "95131",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/95131"
},
{
"name": "RHSA-2017:3046",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
},
{
"name": "openSUSE-SU-2017:0077",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
},
{
"name": "GLSA-201701-56",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201701-56"
},
{
"name": "1039427",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1039427"
},
{
"name": "RHSA-2017:1222",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1222"
},
{
"name": "openSUSE-SU-2017:0080",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
},
{
"name": "RHSA-2017:3453",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:3453"
},
{
"name": "openSUSE-SU-2016:3202",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
},
{
"name": "RHSA-2017:2999",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:2999"
},
{
"name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
},
{
"name": "USN-4246-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4246-1/"
},
{
"name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
},
{
"name": "USN-4292-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4292-1/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/HT208144"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/HT208113"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/HT208112"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/HT208115"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
},
{
"name": "GLSA-202007-54",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/202007-54"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@microfocus.com",
"ID": "CVE-2016-9840",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2017:1221",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1221"
},
{
"name": "RHSA-2017:1220",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1220"
},
{
"name": "RHSA-2017:3047",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:3047"
},
{
"name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2016/12/05/21"
},
{
"name": "95131",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/95131"
},
{
"name": "RHSA-2017:3046",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
},
{
"name": "openSUSE-SU-2017:0077",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html"
},
{
"name": "GLSA-201701-56",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201701-56"
},
{
"name": "1039427",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1039427"
},
{
"name": "RHSA-2017:1222",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1222"
},
{
"name": "openSUSE-SU-2017:0080",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html"
},
{
"name": "RHSA-2017:3453",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:3453"
},
{
"name": "openSUSE-SU-2016:3202",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html"
},
{
"name": "RHSA-2017:2999",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:2999"
},
{
"name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html"
},
{
"name": "USN-4246-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4246-1/"
},
{
"name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html"
},
{
"name": "USN-4292-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4292-1/"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
},
{
"name": "https://support.apple.com/HT208144",
"refsource": "CONFIRM",
"url": "https://support.apple.com/HT208144"
},
{
"name": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0",
"refsource": "CONFIRM",
"url": "https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0"
},
{
"name": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib",
"refsource": "MISC",
"url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
},
{
"name": "https://support.apple.com/HT208113",
"refsource": "CONFIRM",
"url": "https://support.apple.com/HT208113"
},
{
"name": "https://support.apple.com/HT208112",
"refsource": "CONFIRM",
"url": "https://support.apple.com/HT208112"
},
{
"name": "https://support.apple.com/HT208115",
"refsource": "CONFIRM",
"url": "https://support.apple.com/HT208115"
},
{
"name": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
"refsource": "MISC",
"url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
},
{
"name": "GLSA-202007-54",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202007-54"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
"assignerShortName": "microfocus",
"cveId": "CVE-2016-9840",
"datePublished": "2017-05-23T03:56:00.000Z",
"dateReserved": "2016-12-05T00:00:00.000Z",
"dateUpdated": "2024-08-06T02:59:03.590Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2016-9840",
"date": "2026-05-29",
"epss": "0.12517",
"percentile": "0.94047"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2016-9840\",\"sourceIdentifier\":\"security@opentext.com\",\"published\":\"2017-05-23T04:29:01.667\",\"lastModified\":\"2026-05-13T00:24:29.033\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.\"},{\"lang\":\"es\",\"value\":\"Inftrees.c en zlib 1.2.8 podr\u00eda permitir que los atacantes dependientes del contexto tener un impacto no especificado al aprovechar la aritm\u00e9tica de puntero incorrecta.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:boost:boost:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.78.0\",\"matchCriteriaId\":\"BA820824-3002-49BD-9093-3848F0B74E28\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.2.0.6\",\"versionEndExcluding\":\"1.2.9\",\"matchCriteriaId\":\"D5425C69-8CBB-433C-A330-798C66E7D6F2\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4863BE36-D16A-4D75-90D9-FD76DB5B48B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"B3293E55-5506-4587-A318-D1734F781C09\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6833701E-5510-4180-9523-9CFD318DEE6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*\",\"matchCriteriaId\":\"7037AEF9-403D-43EC-ABBB-B46619241586\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*\",\"matchCriteriaId\":\"B781F1F7-DE18-41F7-83C1-8690B0884DDE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D36F2A6-1329-4D74-BADC-C22D46CF7CFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*\",\"matchCriteriaId\":\"D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*\",\"matchCriteriaId\":\"71219100-B476-4062-A40A-13F1B8C7DAED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCC055BA-0D21-4D2B-AC9B-B81B8468860C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5.0\",\"versionEndIncluding\":\"5.5.61\",\"matchCriteriaId\":\"F370B9CC-03AA-436B-AF81-1FD48F33BAEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.6.0\",\"versionEndIncluding\":\"5.6.41\",\"matchCriteriaId\":\"9A2BAC98-4BC4-44EB-AE09-826BD21D5E3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.7.0\",\"versionEndIncluding\":\"5.7.23\",\"matchCriteriaId\":\"76702038-5D38-450F-BA25-FED83FBE758B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndIncluding\":\"8.0.12\",\"matchCriteriaId\":\"106FA614-55B8-4D90-B654-47EE199E7CC1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F96E3779-F56A-45FF-BB3D-4980527D721E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11\",\"matchCriteriaId\":\"F72F611A-26E5-4CC7-888E-96AD158D7C68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndExcluding\":\"10.13.0\",\"matchCriteriaId\":\"66F7B69D-5362-4E15-9FFE-8F3E87738920\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.0\",\"matchCriteriaId\":\"11895153-2FE5-4D73-B7FC-182FA280BA36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4\",\"matchCriteriaId\":\"49790D15-2446-4138-B1FA-6C806587C5A1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndIncluding\":\"4.1.2\",\"matchCriteriaId\":\"A47FC4F7-1F77-4314-B4B3-3C5D8E335379\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"4.2.0\",\"versionEndExcluding\":\"4.8.2\",\"matchCriteriaId\":\"BCA5DE0E-A10C-42A1-BFE3-1FED2C3171AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndIncluding\":\"6.8.1\",\"matchCriteriaId\":\"D107EC29-67E7-40C3-8E5A-324C9105C5E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"6.9.0\",\"versionEndExcluding\":\"6.10.2\",\"matchCriteriaId\":\"ED1F2BAC-47F9-49C9-93FE-20EDD46CDF86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.6.0\",\"matchCriteriaId\":\"7F49B5A3-6516-46A2-884B-4D6657C188AE\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/12/05/21\",\"source\":\"security@opentext.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95131\",\"source\":\"security@opentext.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1039427\",\"source\":\"security@opentext.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1220\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1221\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1222\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2999\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3046\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3047\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3453\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1402345\",\"source\":\"security@opentext.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0\",\"source\":\"security@opentext.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201701-56\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202007-54\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208112\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208113\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208115\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208144\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4246-1/\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4292-1/\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://wiki.mozilla.org/images/0/09/Zlib-report.pdf\",\"source\":\"security@opentext.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/12/05/21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95131\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1039427\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1220\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1221\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1222\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2999\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3046\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3047\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3453\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1402345\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201701-56\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202007-54\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208112\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208113\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208115\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208144\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4246-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4292-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://wiki.mozilla.org/images/0/09/Zlib-report.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
RHSA-2025:8395
Vulnerability from csaf_redhat - Published: 2025-06-02 21:24 - Updated: 2026-03-25 00:03Summary
Red Hat Security Advisory: rsync security update
Severity
Low
Notes
Topic: An update for rsync is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.
Security Fix(es):
* zlib: Out-of-bounds pointer arithmetic in inftrees.c (CVE-2016-9840)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior.
8.8 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-daemon-0:3.1.3-23.el8_10.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rsync is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* zlib: Out-of-bounds pointer arithmetic in inftrees.c (CVE-2016-9840)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:8395",
"url": "https://access.redhat.com/errata/RHSA-2025:8395"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "1402345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8395.json"
}
],
"title": "Red Hat Security Advisory: rsync security update",
"tracking": {
"current_release_date": "2026-03-25T00:03:10+00:00",
"generator": {
"date": "2026-03-25T00:03:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.3"
}
},
"id": "RHSA-2025:8395",
"initial_release_date": "2025-06-02T21:24:57+00:00",
"revision_history": [
{
"date": "2025-06-02T21:24:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-06-02T21:24:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-25T00:03:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rsync-0:3.1.3-23.el8_10.src",
"product": {
"name": "rsync-0:3.1.3-23.el8_10.src",
"product_id": "rsync-0:3.1.3-23.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync@3.1.3-23.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rsync-0:3.1.3-23.el8_10.aarch64",
"product": {
"name": "rsync-0:3.1.3-23.el8_10.aarch64",
"product_id": "rsync-0:3.1.3-23.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync@3.1.3-23.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rsync-debugsource-0:3.1.3-23.el8_10.aarch64",
"product": {
"name": "rsync-debugsource-0:3.1.3-23.el8_10.aarch64",
"product_id": "rsync-debugsource-0:3.1.3-23.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-debugsource@3.1.3-23.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.aarch64",
"product": {
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.aarch64",
"product_id": "rsync-debuginfo-0:3.1.3-23.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-debuginfo@3.1.3-23.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rsync-0:3.1.3-23.el8_10.ppc64le",
"product": {
"name": "rsync-0:3.1.3-23.el8_10.ppc64le",
"product_id": "rsync-0:3.1.3-23.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync@3.1.3-23.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rsync-debugsource-0:3.1.3-23.el8_10.ppc64le",
"product": {
"name": "rsync-debugsource-0:3.1.3-23.el8_10.ppc64le",
"product_id": "rsync-debugsource-0:3.1.3-23.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-debugsource@3.1.3-23.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le",
"product": {
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le",
"product_id": "rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-debuginfo@3.1.3-23.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rsync-0:3.1.3-23.el8_10.x86_64",
"product": {
"name": "rsync-0:3.1.3-23.el8_10.x86_64",
"product_id": "rsync-0:3.1.3-23.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync@3.1.3-23.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rsync-debugsource-0:3.1.3-23.el8_10.x86_64",
"product": {
"name": "rsync-debugsource-0:3.1.3-23.el8_10.x86_64",
"product_id": "rsync-debugsource-0:3.1.3-23.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-debugsource@3.1.3-23.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.x86_64",
"product": {
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.x86_64",
"product_id": "rsync-debuginfo-0:3.1.3-23.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-debuginfo@3.1.3-23.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rsync-0:3.1.3-23.el8_10.s390x",
"product": {
"name": "rsync-0:3.1.3-23.el8_10.s390x",
"product_id": "rsync-0:3.1.3-23.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync@3.1.3-23.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rsync-debugsource-0:3.1.3-23.el8_10.s390x",
"product": {
"name": "rsync-debugsource-0:3.1.3-23.el8_10.s390x",
"product_id": "rsync-debugsource-0:3.1.3-23.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-debugsource@3.1.3-23.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.s390x",
"product": {
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.s390x",
"product_id": "rsync-debuginfo-0:3.1.3-23.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-debuginfo@3.1.3-23.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rsync-daemon-0:3.1.3-23.el8_10.noarch",
"product": {
"name": "rsync-daemon-0:3.1.3-23.el8_10.noarch",
"product_id": "rsync-daemon-0:3.1.3-23.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rsync-daemon@3.1.3-23.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-0:3.1.3-23.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.aarch64"
},
"product_reference": "rsync-0:3.1.3-23.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-0:3.1.3-23.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.ppc64le"
},
"product_reference": "rsync-0:3.1.3-23.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-0:3.1.3-23.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.s390x"
},
"product_reference": "rsync-0:3.1.3-23.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-0:3.1.3-23.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.src"
},
"product_reference": "rsync-0:3.1.3-23.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-0:3.1.3-23.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.x86_64"
},
"product_reference": "rsync-0:3.1.3-23.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-daemon-0:3.1.3-23.el8_10.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-daemon-0:3.1.3-23.el8_10.noarch"
},
"product_reference": "rsync-daemon-0:3.1.3-23.el8_10.noarch",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.aarch64"
},
"product_reference": "rsync-debuginfo-0:3.1.3-23.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le"
},
"product_reference": "rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.s390x"
},
"product_reference": "rsync-debuginfo-0:3.1.3-23.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-debuginfo-0:3.1.3-23.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.x86_64"
},
"product_reference": "rsync-debuginfo-0:3.1.3-23.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-debugsource-0:3.1.3-23.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.aarch64"
},
"product_reference": "rsync-debugsource-0:3.1.3-23.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-debugsource-0:3.1.3-23.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.ppc64le"
},
"product_reference": "rsync-debugsource-0:3.1.3-23.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-debugsource-0:3.1.3-23.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.s390x"
},
"product_reference": "rsync-debugsource-0:3.1.3-23.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rsync-debugsource-0:3.1.3-23.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.x86_64"
},
"product_reference": "rsync-debugsource-0:3.1.3-23.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402345"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zlib: Out-of-bound pointer arithmetic in inftrees.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While this undefined behavior does not currently manifest as an exploitable issue on Red Hat Enterprise Linux systems using GCC compilers, it could become problematic with future compiler implementations. This flaw affects various Java packages in Red Hat Enterprise Linux 6 and 7, but native zlib packages in Red Hat Enterprise Linux are not impacted due to the specific compiler implementation used.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-daemon-0:3.1.3-23.el8_10.noarch",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "RHBZ#1402345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9840"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840"
},
{
"category": "external",
"summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7",
"url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7"
},
{
"category": "external",
"summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
"url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
}
],
"release_date": "2016-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-02T21:24:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-daemon-0:3.1.3-23.el8_10.noarch",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:8395"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-0:3.1.3-23.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-daemon-0:3.1.3-23.el8_10.noarch",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debuginfo-0:3.1.3-23.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:rsync-debugsource-0:3.1.3-23.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "zlib: Out-of-bound pointer arithmetic in inftrees.c"
}
]
}
SUSE-SU-2016:3209-1
Vulnerability from csaf_suse - Published: 2016-12-21 15:25 - Updated: 2016-12-21 15:25Summary
Security update for zlib
Severity
Moderate
Notes
Title of the patch: Security update for zlib
Description of the patch:
This update for zlib fixes the following issues:
* Incompatible declarations for external linkage function deflate (bnc#1003577)
* CVE-2016-9842: Undefined Left Shift of Negative Number (bnc#1003580)
* CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bnc#1003579)
* CVE-2016-9843: Big-endian out-of-bounds pointer
Patchnames: sdksp4-zlib-12902,slessp4-zlib-12902
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
51 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for zlib",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for zlib fixes the following issues:\n\n * Incompatible declarations for external linkage function deflate (bnc#1003577)\n * CVE-2016-9842: Undefined Left Shift of Negative Number (bnc#1003580) \n * CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bnc#1003579)\n * CVE-2016-9843: Big-endian out-of-bounds pointer\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp4-zlib-12902,slessp4-zlib-12902",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_3209-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:3209-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20163209-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:3209-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-December/002506.html"
},
{
"category": "self",
"summary": "SUSE Bug 1003577",
"url": "https://bugzilla.suse.com/1003577"
},
{
"category": "self",
"summary": "SUSE Bug 1003579",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "self",
"summary": "SUSE Bug 1003580",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "self",
"summary": "SUSE Bug 1013882",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
}
],
"title": "Security update for zlib",
"tracking": {
"current_release_date": "2016-12-21T15:25:07Z",
"generator": {
"date": "2016-12-21T15:25:07Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:3209-1",
"initial_release_date": "2016-12-21T15:25:07Z",
"revision_history": [
{
"date": "2016-12-21T15:25:07Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.7-0.14.1.i586",
"product": {
"name": "zlib-devel-1.2.7-0.14.1.i586",
"product_id": "zlib-devel-1.2.7-0.14.1.i586"
}
},
{
"category": "product_version",
"name": "zlib-1.2.7-0.14.1.i586",
"product": {
"name": "zlib-1.2.7-0.14.1.i586",
"product_id": "zlib-1.2.7-0.14.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.7-0.14.1.ia64",
"product": {
"name": "zlib-devel-1.2.7-0.14.1.ia64",
"product_id": "zlib-devel-1.2.7-0.14.1.ia64"
}
},
{
"category": "product_version",
"name": "zlib-1.2.7-0.14.1.ia64",
"product": {
"name": "zlib-1.2.7-0.14.1.ia64",
"product_id": "zlib-1.2.7-0.14.1.ia64"
}
},
{
"category": "product_version",
"name": "zlib-x86-1.2.7-0.14.1.ia64",
"product": {
"name": "zlib-x86-1.2.7-0.14.1.ia64",
"product_id": "zlib-x86-1.2.7-0.14.1.ia64"
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.7-0.14.1.ppc64",
"product": {
"name": "zlib-devel-1.2.7-0.14.1.ppc64",
"product_id": "zlib-devel-1.2.7-0.14.1.ppc64"
}
},
{
"category": "product_version",
"name": "zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"product": {
"name": "zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"product_id": "zlib-devel-32bit-1.2.7-0.14.1.ppc64"
}
},
{
"category": "product_version",
"name": "zlib-1.2.7-0.14.1.ppc64",
"product": {
"name": "zlib-1.2.7-0.14.1.ppc64",
"product_id": "zlib-1.2.7-0.14.1.ppc64"
}
},
{
"category": "product_version",
"name": "zlib-32bit-1.2.7-0.14.1.ppc64",
"product": {
"name": "zlib-32bit-1.2.7-0.14.1.ppc64",
"product_id": "zlib-32bit-1.2.7-0.14.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.7-0.14.1.s390x",
"product": {
"name": "zlib-devel-1.2.7-0.14.1.s390x",
"product_id": "zlib-devel-1.2.7-0.14.1.s390x"
}
},
{
"category": "product_version",
"name": "zlib-devel-32bit-1.2.7-0.14.1.s390x",
"product": {
"name": "zlib-devel-32bit-1.2.7-0.14.1.s390x",
"product_id": "zlib-devel-32bit-1.2.7-0.14.1.s390x"
}
},
{
"category": "product_version",
"name": "zlib-1.2.7-0.14.1.s390x",
"product": {
"name": "zlib-1.2.7-0.14.1.s390x",
"product_id": "zlib-1.2.7-0.14.1.s390x"
}
},
{
"category": "product_version",
"name": "zlib-32bit-1.2.7-0.14.1.s390x",
"product": {
"name": "zlib-32bit-1.2.7-0.14.1.s390x",
"product_id": "zlib-32bit-1.2.7-0.14.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.7-0.14.1.x86_64",
"product": {
"name": "zlib-devel-1.2.7-0.14.1.x86_64",
"product_id": "zlib-devel-1.2.7-0.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-devel-32bit-1.2.7-0.14.1.x86_64",
"product": {
"name": "zlib-devel-32bit-1.2.7-0.14.1.x86_64",
"product_id": "zlib-devel-32bit-1.2.7-0.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-1.2.7-0.14.1.x86_64",
"product": {
"name": "zlib-1.2.7-0.14.1.x86_64",
"product_id": "zlib-1.2.7-0.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-32bit-1.2.7-0.14.1.x86_64",
"product": {
"name": "zlib-32bit-1.2.7-0.14.1.x86_64",
"product_id": "zlib-32bit-1.2.7-0.14.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.7-0.14.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586"
},
"product_reference": "zlib-devel-1.2.7-0.14.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.7-0.14.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64"
},
"product_reference": "zlib-devel-1.2.7-0.14.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.7-0.14.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64"
},
"product_reference": "zlib-devel-1.2.7-0.14.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.7-0.14.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x"
},
"product_reference": "zlib-devel-1.2.7-0.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.7-0.14.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64"
},
"product_reference": "zlib-devel-1.2.7-0.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-32bit-1.2.7-0.14.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64"
},
"product_reference": "zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-32bit-1.2.7-0.14.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x"
},
"product_reference": "zlib-devel-32bit-1.2.7-0.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-32bit-1.2.7-0.14.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
},
"product_reference": "zlib-devel-32bit-1.2.7-0.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586"
},
"product_reference": "zlib-1.2.7-0.14.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64"
},
"product_reference": "zlib-1.2.7-0.14.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64"
},
"product_reference": "zlib-1.2.7-0.14.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x"
},
"product_reference": "zlib-1.2.7-0.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64"
},
"product_reference": "zlib-1.2.7-0.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-32bit-1.2.7-0.14.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64"
},
"product_reference": "zlib-32bit-1.2.7-0.14.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-32bit-1.2.7-0.14.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x"
},
"product_reference": "zlib-32bit-1.2.7-0.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-32bit-1.2.7-0.14.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64"
},
"product_reference": "zlib-32bit-1.2.7-0.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-x86-1.2.7-0.14.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64"
},
"product_reference": "zlib-x86-1.2.7-0.14.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586"
},
"product_reference": "zlib-1.2.7-0.14.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64"
},
"product_reference": "zlib-1.2.7-0.14.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64"
},
"product_reference": "zlib-1.2.7-0.14.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x"
},
"product_reference": "zlib-1.2.7-0.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-1.2.7-0.14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64"
},
"product_reference": "zlib-1.2.7-0.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-32bit-1.2.7-0.14.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64"
},
"product_reference": "zlib-32bit-1.2.7-0.14.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-32bit-1.2.7-0.14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x"
},
"product_reference": "zlib-32bit-1.2.7-0.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-32bit-1.2.7-0.14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64"
},
"product_reference": "zlib-32bit-1.2.7-0.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-x86-1.2.7-0.14.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64"
},
"product_reference": "zlib-x86-1.2.7-0.14.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-12-21T15:25:07Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-12-21T15:25:07Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-12-21T15:25:07Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-32bit-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:zlib-x86-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-1.2.7-0.14.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:zlib-devel-32bit-1.2.7-0.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-12-21T15:25:07Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
}
]
}
SUSE-SU-2017:0003-1
Vulnerability from csaf_suse - Published: 2017-01-02 07:35 - Updated: 2017-01-02 07:35Summary
Security update for zlib
Severity
Moderate
Notes
Title of the patch: Security update for zlib
Description of the patch:
This update for zlib fixes the following issues:
CVE-2016-9843: Big-endian out-of-bounds pointer
CVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580)
CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579)
Incompatible declarations for external linkage function deflate (bsc#1003577)
Patchnames: SUSE-SLE-DESKTOP-12-SP2-2017-2,SUSE-SLE-RPI-12-SP2-2017-2,SUSE-SLE-SDK-12-SP2-2017-2,SUSE-SLE-SERVER-12-SP2-2017-2
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
51 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for zlib",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for zlib fixes the following issues:\n\nCVE-2016-9843: Big-endian out-of-bounds pointer\n\nCVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580) \n\nCVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579)\n\nIncompatible declarations for external linkage function deflate (bsc#1003577)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP2-2017-2,SUSE-SLE-RPI-12-SP2-2017-2,SUSE-SLE-SDK-12-SP2-2017-2,SUSE-SLE-SERVER-12-SP2-2017-2",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0003-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2017:0003-1",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170003-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2017:0003-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2017-January/002540.html"
},
{
"category": "self",
"summary": "SUSE Bug 1003577",
"url": "https://bugzilla.suse.com/1003577"
},
{
"category": "self",
"summary": "SUSE Bug 1003579",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "self",
"summary": "SUSE Bug 1003580",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "self",
"summary": "SUSE Bug 1013882",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
}
],
"title": "Security update for zlib",
"tracking": {
"current_release_date": "2017-01-02T07:35:21Z",
"generator": {
"date": "2017-01-02T07:35:21Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2017:0003-1",
"initial_release_date": "2017-01-02T07:35:21Z",
"revision_history": [
{
"date": "2017-01-02T07:35:21Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libz1-1.2.8-11.1.aarch64",
"product": {
"name": "libz1-1.2.8-11.1.aarch64",
"product_id": "libz1-1.2.8-11.1.aarch64"
}
},
{
"category": "product_version",
"name": "zlib-devel-1.2.8-11.1.aarch64",
"product": {
"name": "zlib-devel-1.2.8-11.1.aarch64",
"product_id": "zlib-devel-1.2.8-11.1.aarch64"
}
},
{
"category": "product_version",
"name": "zlib-devel-static-1.2.8-11.1.aarch64",
"product": {
"name": "zlib-devel-static-1.2.8-11.1.aarch64",
"product_id": "zlib-devel-static-1.2.8-11.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.8-11.1.ppc64le",
"product": {
"name": "zlib-devel-1.2.8-11.1.ppc64le",
"product_id": "zlib-devel-1.2.8-11.1.ppc64le"
}
},
{
"category": "product_version",
"name": "zlib-devel-static-1.2.8-11.1.ppc64le",
"product": {
"name": "zlib-devel-static-1.2.8-11.1.ppc64le",
"product_id": "zlib-devel-static-1.2.8-11.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libz1-1.2.8-11.1.ppc64le",
"product": {
"name": "libz1-1.2.8-11.1.ppc64le",
"product_id": "libz1-1.2.8-11.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.8-11.1.s390x",
"product": {
"name": "zlib-devel-1.2.8-11.1.s390x",
"product_id": "zlib-devel-1.2.8-11.1.s390x"
}
},
{
"category": "product_version",
"name": "zlib-devel-32bit-1.2.8-11.1.s390x",
"product": {
"name": "zlib-devel-32bit-1.2.8-11.1.s390x",
"product_id": "zlib-devel-32bit-1.2.8-11.1.s390x"
}
},
{
"category": "product_version",
"name": "zlib-devel-static-1.2.8-11.1.s390x",
"product": {
"name": "zlib-devel-static-1.2.8-11.1.s390x",
"product_id": "zlib-devel-static-1.2.8-11.1.s390x"
}
},
{
"category": "product_version",
"name": "libz1-1.2.8-11.1.s390x",
"product": {
"name": "libz1-1.2.8-11.1.s390x",
"product_id": "libz1-1.2.8-11.1.s390x"
}
},
{
"category": "product_version",
"name": "libz1-32bit-1.2.8-11.1.s390x",
"product": {
"name": "libz1-32bit-1.2.8-11.1.s390x",
"product_id": "libz1-32bit-1.2.8-11.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libz1-1.2.8-11.1.x86_64",
"product": {
"name": "libz1-1.2.8-11.1.x86_64",
"product_id": "libz1-1.2.8-11.1.x86_64"
}
},
{
"category": "product_version",
"name": "libz1-32bit-1.2.8-11.1.x86_64",
"product": {
"name": "libz1-32bit-1.2.8-11.1.x86_64",
"product_id": "libz1-32bit-1.2.8-11.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-devel-1.2.8-11.1.x86_64",
"product": {
"name": "zlib-devel-1.2.8-11.1.x86_64",
"product_id": "zlib-devel-1.2.8-11.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-devel-32bit-1.2.8-11.1.x86_64",
"product": {
"name": "zlib-devel-32bit-1.2.8-11.1.x86_64",
"product_id": "zlib-devel-32bit-1.2.8-11.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-devel-static-1.2.8-11.1.x86_64",
"product": {
"name": "zlib-devel-static-1.2.8-11.1.x86_64",
"product_id": "zlib-devel-static-1.2.8-11.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP2",
"product_id": "SUSE Linux Enterprise Desktop 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
"product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
"product_id": "SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64"
},
"product_reference": "libz1-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
"product_id": "SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64"
},
"product_reference": "libz1-32bit-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
"product_id": "SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64"
},
"product_reference": "zlib-devel-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
"product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64"
},
"product_reference": "libz1-1.2.8-11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
"product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64"
},
"product_reference": "zlib-devel-1.2.8-11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64"
},
"product_reference": "zlib-devel-1.2.8-11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le"
},
"product_reference": "zlib-devel-1.2.8-11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x"
},
"product_reference": "zlib-devel-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64"
},
"product_reference": "zlib-devel-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-32bit-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x"
},
"product_reference": "zlib-devel-32bit-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-32bit-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64"
},
"product_reference": "zlib-devel-32bit-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-static-1.2.8-11.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64"
},
"product_reference": "zlib-devel-static-1.2.8-11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-static-1.2.8-11.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le"
},
"product_reference": "zlib-devel-static-1.2.8-11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-static-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x"
},
"product_reference": "zlib-devel-static-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-static-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
},
"product_reference": "zlib-devel-static-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64"
},
"product_reference": "libz1-1.2.8-11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le"
},
"product_reference": "libz1-1.2.8-11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x"
},
"product_reference": "libz1-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64"
},
"product_reference": "libz1-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x"
},
"product_reference": "libz1-32bit-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64"
},
"product_reference": "libz1-32bit-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64"
},
"product_reference": "zlib-devel-1.2.8-11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le"
},
"product_reference": "zlib-devel-1.2.8-11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x"
},
"product_reference": "zlib-devel-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64"
},
"product_reference": "zlib-devel-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64"
},
"product_reference": "libz1-1.2.8-11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le"
},
"product_reference": "libz1-1.2.8-11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x"
},
"product_reference": "libz1-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64"
},
"product_reference": "libz1-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x"
},
"product_reference": "libz1-32bit-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64"
},
"product_reference": "libz1-32bit-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64"
},
"product_reference": "zlib-devel-1.2.8-11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le"
},
"product_reference": "zlib-devel-1.2.8-11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x"
},
"product_reference": "zlib-devel-1.2.8-11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-11.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64"
},
"product_reference": "zlib-devel-1.2.8-11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-01-02T07:35:21Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-01-02T07:35:21Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-01-02T07:35:21Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libz1-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-32bit-1.2.8-11.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:zlib-devel-static-1.2.8-11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-01-02T07:35:21Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
}
]
}
SUSE-SU-2017:0004-1
Vulnerability from csaf_suse - Published: 2017-01-02 07:37 - Updated: 2017-01-02 07:37Summary
Security update for zlib
Severity
Moderate
Notes
Title of the patch: Security update for zlib
Description of the patch:
This update for zlib fixes the following issues:
CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)
CVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580)
CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579)
Incompatible declarations for external linkage function deflate (bsc#1003577)
Patchnames: SUSE-SLE-DESKTOP-12-SP1-2017-3,SUSE-SLE-SDK-12-SP1-2017-3,SUSE-SLE-SERVER-12-SP1-2017-3
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
51 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for zlib",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for zlib fixes the following issues:\n\nCVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)\n\nCVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580) \n\nCVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579)\n\nIncompatible declarations for external linkage function deflate (bsc#1003577)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP1-2017-3,SUSE-SLE-SDK-12-SP1-2017-3,SUSE-SLE-SERVER-12-SP1-2017-3",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0004-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2017:0004-1",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170004-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2017:0004-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2017-January/002541.html"
},
{
"category": "self",
"summary": "SUSE Bug 1003577",
"url": "https://bugzilla.suse.com/1003577"
},
{
"category": "self",
"summary": "SUSE Bug 1003579",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "self",
"summary": "SUSE Bug 1003580",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "self",
"summary": "SUSE Bug 1013882",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
}
],
"title": "Security update for zlib",
"tracking": {
"current_release_date": "2017-01-02T07:37:00Z",
"generator": {
"date": "2017-01-02T07:37:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2017:0004-1",
"initial_release_date": "2017-01-02T07:37:00Z",
"revision_history": [
{
"date": "2017-01-02T07:37:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.8-6.3.1.ppc64le",
"product": {
"name": "zlib-devel-1.2.8-6.3.1.ppc64le",
"product_id": "zlib-devel-1.2.8-6.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "zlib-devel-static-1.2.8-6.3.1.ppc64le",
"product": {
"name": "zlib-devel-static-1.2.8-6.3.1.ppc64le",
"product_id": "zlib-devel-static-1.2.8-6.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libz1-1.2.8-6.3.1.ppc64le",
"product": {
"name": "libz1-1.2.8-6.3.1.ppc64le",
"product_id": "libz1-1.2.8-6.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "zlib-devel-1.2.8-6.3.1.s390x",
"product": {
"name": "zlib-devel-1.2.8-6.3.1.s390x",
"product_id": "zlib-devel-1.2.8-6.3.1.s390x"
}
},
{
"category": "product_version",
"name": "zlib-devel-32bit-1.2.8-6.3.1.s390x",
"product": {
"name": "zlib-devel-32bit-1.2.8-6.3.1.s390x",
"product_id": "zlib-devel-32bit-1.2.8-6.3.1.s390x"
}
},
{
"category": "product_version",
"name": "zlib-devel-static-1.2.8-6.3.1.s390x",
"product": {
"name": "zlib-devel-static-1.2.8-6.3.1.s390x",
"product_id": "zlib-devel-static-1.2.8-6.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libz1-1.2.8-6.3.1.s390x",
"product": {
"name": "libz1-1.2.8-6.3.1.s390x",
"product_id": "libz1-1.2.8-6.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libz1-32bit-1.2.8-6.3.1.s390x",
"product": {
"name": "libz1-32bit-1.2.8-6.3.1.s390x",
"product_id": "libz1-32bit-1.2.8-6.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libz1-1.2.8-6.3.1.x86_64",
"product": {
"name": "libz1-1.2.8-6.3.1.x86_64",
"product_id": "libz1-1.2.8-6.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libz1-32bit-1.2.8-6.3.1.x86_64",
"product": {
"name": "libz1-32bit-1.2.8-6.3.1.x86_64",
"product_id": "libz1-32bit-1.2.8-6.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-devel-1.2.8-6.3.1.x86_64",
"product": {
"name": "zlib-devel-1.2.8-6.3.1.x86_64",
"product_id": "zlib-devel-1.2.8-6.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"product": {
"name": "zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"product_id": "zlib-devel-32bit-1.2.8-6.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "zlib-devel-static-1.2.8-6.3.1.x86_64",
"product": {
"name": "zlib-devel-static-1.2.8-6.3.1.x86_64",
"product_id": "zlib-devel-static-1.2.8-6.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64"
},
"product_reference": "libz1-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64"
},
"product_reference": "libz1-32bit-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-6.3.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le"
},
"product_reference": "zlib-devel-1.2.8-6.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-6.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x"
},
"product_reference": "zlib-devel-1.2.8-6.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64"
},
"product_reference": "zlib-devel-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-32bit-1.2.8-6.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x"
},
"product_reference": "zlib-devel-32bit-1.2.8-6.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-32bit-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64"
},
"product_reference": "zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-static-1.2.8-6.3.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le"
},
"product_reference": "zlib-devel-static-1.2.8-6.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-static-1.2.8-6.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x"
},
"product_reference": "zlib-devel-static-1.2.8-6.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zlib-devel-static-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
},
"product_reference": "zlib-devel-static-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-6.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le"
},
"product_reference": "libz1-1.2.8-6.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-6.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x"
},
"product_reference": "libz1-1.2.8-6.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64"
},
"product_reference": "libz1-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-6.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x"
},
"product_reference": "libz1-32bit-1.2.8-6.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64"
},
"product_reference": "libz1-32bit-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-6.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le"
},
"product_reference": "libz1-1.2.8-6.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-6.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x"
},
"product_reference": "libz1-1.2.8-6.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64"
},
"product_reference": "libz1-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-6.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x"
},
"product_reference": "libz1-32bit-1.2.8-6.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libz1-32bit-1.2.8-6.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64"
},
"product_reference": "libz1-32bit-1.2.8-6.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-01-02T07:37:00Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-01-02T07:37:00Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-01-02T07:37:00Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libz1-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-32bit-1.2.8-6.3.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:zlib-devel-static-1.2.8-6.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-01-02T07:37:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
}
]
}
SUSE-SU-2017:1384-1
Vulnerability from csaf_suse - Published: 2017-05-23 13:37 - Updated: 2017-05-23 13:37Summary
Security update for java-1_7_0-ibm
Severity
Important
Notes
Title of the patch: Security update for java-1_7_0-ibm
Description of the patch:
This update for java-1_7_0-ibm fixes the following issues:
Version update to 7.0-10.5 bsc#1038505
- CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
- CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
- CVE-2016-9842: zlib: Undefined left shift of negative number
- CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
- CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
- CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
- CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher
- CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
- CVE-2017-3533: OpenJDK: newline injection in the FTP client
- CVE-2017-3544: OpenJDK: newline injection in the SMTP client
Patchnames: sleposp3-java-1_7_0-ibm-13124,slessp3-java-1_7_0-ibm-13124
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
72 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for java-1_7_0-ibm fixes the following issues:\n\nVersion update to 7.0-10.5 bsc#1038505\n\n - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n - CVE-2016-9842: zlib: Undefined left shift of negative number\n - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher \n - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sleposp3-java-1_7_0-ibm-13124,slessp3-java-1_7_0-ibm-13124",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1384-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2017:1384-1",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171384-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2017:1384-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002910.html"
},
{
"category": "self",
"summary": "SUSE Bug 1038505",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1289 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3509 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3511 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3533 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3539 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3544/"
}
],
"title": "Security update for java-1_7_0-ibm",
"tracking": {
"current_release_date": "2017-05-23T13:37:57Z",
"generator": {
"date": "2017-05-23T13:37:57Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2017:1384-1",
"initial_release_date": "2017-05-23T13:37:57Z",
"revision_history": [
{
"date": "2017-05-23T13:37:57Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"product": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"product_id": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"product": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"product_id": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"product_id": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"product_id": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-pos:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
},
{
"cve": "CVE-2017-1289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1289"
}
],
"notes": [
{
"category": "general",
"text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1289",
"url": "https://www.suse.com/security/cve/CVE-2017-1289"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-1289",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-1289"
},
{
"cve": "CVE-2017-3509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3509"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3509",
"url": "https://www.suse.com/security/cve/CVE-2017-3509"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-3509"
},
{
"cve": "CVE-2017-3511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3511"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3511",
"url": "https://www.suse.com/security/cve/CVE-2017-3511"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "important"
}
],
"title": "CVE-2017-3511"
},
{
"cve": "CVE-2017-3533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3533"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3533",
"url": "https://www.suse.com/security/cve/CVE-2017-3533"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "moderate"
}
],
"title": "CVE-2017-3533"
},
{
"cve": "CVE-2017-3539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3539"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3539",
"url": "https://www.suse.com/security/cve/CVE-2017-3539"
},
{
"category": "external",
"summary": "SUSE Bug 1005522 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1005522"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "low"
}
],
"title": "CVE-2017-3539"
},
{
"cve": "CVE-2017-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3544"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3544",
"url": "https://www.suse.com/security/cve/CVE-2017-3544"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:57Z",
"details": "important"
}
],
"title": "CVE-2017-3544"
}
]
}
SUSE-SU-2017:1385-1
Vulnerability from csaf_suse - Published: 2017-05-23 13:38 - Updated: 2017-05-23 13:38Summary
Security update for java-1_7_1-ibm
Severity
Important
Notes
Title of the patch: Security update for java-1_7_1-ibm
Description of the patch:
This update for java-1_7_1-ibm fixes the following issues:
- Version update to 7.1-4.5 bsc#1038505
- CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
- CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
- CVE-2016-9842: zlib: Undefined left shift of negative number
- CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
- CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
- CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
- CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher
- CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
- CVE-2017-3533: OpenJDK: newline injection in the FTP client
- CVE-2017-3544: OpenJDK: newline injection in the SMTP client
Patchnames: SUSE-SLE-SAP-12-2017-847,SUSE-SLE-SDK-12-SP1-2017-847,SUSE-SLE-SDK-12-SP2-2017-847,SUSE-SLE-SERVER-12-2017-847,SUSE-SLE-SERVER-12-SP1-2017-847,SUSE-SLE-SERVER-12-SP2-2017-847
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
72 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for java-1_7_1-ibm fixes the following issues:\n\n- Version update to 7.1-4.5 bsc#1038505\n\n - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n - CVE-2016-9842: zlib: Undefined left shift of negative number\n - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher \n - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SAP-12-2017-847,SUSE-SLE-SDK-12-SP1-2017-847,SUSE-SLE-SDK-12-SP2-2017-847,SUSE-SLE-SERVER-12-2017-847,SUSE-SLE-SERVER-12-SP1-2017-847,SUSE-SLE-SERVER-12-SP2-2017-847",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1385-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2017:1385-1",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171385-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2017:1385-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html"
},
{
"category": "self",
"summary": "SUSE Bug 1038505",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1289 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3509 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3511 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3533 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3539 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3544/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2017-05-23T13:38:24Z",
"generator": {
"date": "2017-05-23T13:38:24Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2017:1385-1",
"initial_release_date": "2017-05-23T13:38:24Z",
"revision_history": [
{
"date": "2017-05-23T13:38:24Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
},
{
"cve": "CVE-2017-1289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1289"
}
],
"notes": [
{
"category": "general",
"text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1289",
"url": "https://www.suse.com/security/cve/CVE-2017-1289"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-1289",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "moderate"
}
],
"title": "CVE-2017-1289"
},
{
"cve": "CVE-2017-3509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3509"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3509",
"url": "https://www.suse.com/security/cve/CVE-2017-3509"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "moderate"
}
],
"title": "CVE-2017-3509"
},
{
"cve": "CVE-2017-3511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3511"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3511",
"url": "https://www.suse.com/security/cve/CVE-2017-3511"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "important"
}
],
"title": "CVE-2017-3511"
},
{
"cve": "CVE-2017-3533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3533"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3533",
"url": "https://www.suse.com/security/cve/CVE-2017-3533"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "moderate"
}
],
"title": "CVE-2017-3533"
},
{
"cve": "CVE-2017-3539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3539"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3539",
"url": "https://www.suse.com/security/cve/CVE-2017-3539"
},
{
"category": "external",
"summary": "SUSE Bug 1005522 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1005522"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "low"
}
],
"title": "CVE-2017-3539"
},
{
"cve": "CVE-2017-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3544"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3544",
"url": "https://www.suse.com/security/cve/CVE-2017-3544"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.5-37.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:38:24Z",
"details": "important"
}
],
"title": "CVE-2017-3544"
}
]
}
SUSE-SU-2017:1386-1
Vulnerability from csaf_suse - Published: 2017-05-23 13:37 - Updated: 2017-05-23 13:37Summary
Security update for java-1_8_0-ibm
Severity
Important
Notes
Title of the patch: Security update for java-1_8_0-ibm
Description of the patch:
This update for java-1_8_0-ibm fixes the following issues:
Version update bsc#1038505:
- CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
- CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
- CVE-2016-9842: zlib: Undefined left shift of negative number
- CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
- CVE-2017-3544: OpenJDK: newline injection in the SMTP client
- CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
- CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher
- CVE-2017-3533: OpenJDK: newline injection in the FTP client
- CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
- CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
Patchnames: SUSE-SLE-SDK-12-SP1-2017-844,SUSE-SLE-SDK-12-SP2-2017-844,SUSE-SLE-SERVER-12-SP1-2017-844,SUSE-SLE-SERVER-12-SP2-2017-844
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
72 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for java-1_8_0-ibm fixes the following issues:\n\nVersion update bsc#1038505:\n\n- CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n- CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n- CVE-2016-9842: zlib: Undefined left shift of negative number\n- CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n- CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n- CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n- CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher \n- CVE-2017-3533: OpenJDK: newline injection in the FTP client \n- CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n- CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SDK-12-SP1-2017-844,SUSE-SLE-SDK-12-SP2-2017-844,SUSE-SLE-SERVER-12-SP1-2017-844,SUSE-SLE-SERVER-12-SP2-2017-844",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1386-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2017:1386-1",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171386-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2017:1386-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002912.html"
},
{
"category": "self",
"summary": "SUSE Bug 1038505",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1289 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3509 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3511 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3533 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3539 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3544/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2017-05-23T13:37:36Z",
"generator": {
"date": "2017-05-23T13:37:36Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2017:1386-1",
"initial_release_date": "2017-05-23T13:37:36Z",
"revision_history": [
{
"date": "2017-05-23T13:37:36Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"product_id": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"product_id": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
"product_id": "SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
},
{
"cve": "CVE-2017-1289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1289"
}
],
"notes": [
{
"category": "general",
"text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1289",
"url": "https://www.suse.com/security/cve/CVE-2017-1289"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-1289",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "moderate"
}
],
"title": "CVE-2017-1289"
},
{
"cve": "CVE-2017-3509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3509"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3509",
"url": "https://www.suse.com/security/cve/CVE-2017-3509"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "moderate"
}
],
"title": "CVE-2017-3509"
},
{
"cve": "CVE-2017-3511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3511"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3511",
"url": "https://www.suse.com/security/cve/CVE-2017-3511"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "important"
}
],
"title": "CVE-2017-3511"
},
{
"cve": "CVE-2017-3533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3533"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3533",
"url": "https://www.suse.com/security/cve/CVE-2017-3533"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "moderate"
}
],
"title": "CVE-2017-3533"
},
{
"cve": "CVE-2017-3539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3539"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3539",
"url": "https://www.suse.com/security/cve/CVE-2017-3539"
},
{
"category": "external",
"summary": "SUSE Bug 1005522 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1005522"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "low"
}
],
"title": "CVE-2017-3539"
},
{
"cve": "CVE-2017-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3544"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3544",
"url": "https://www.suse.com/security/cve/CVE-2017-3544"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:36Z",
"details": "important"
}
],
"title": "CVE-2017-3544"
}
]
}
SUSE-SU-2017:1387-1
Vulnerability from csaf_suse - Published: 2017-05-23 13:37 - Updated: 2017-05-23 13:37Summary
Security update for java-1_7_1-ibm
Severity
Important
Notes
Title of the patch: Security update for java-1_7_1-ibm
Description of the patch:
This update for java-1_7_1-ibm fixes the following issues:
Version update to 7.1-4.5 bsc#1038505
- CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
- CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
- CVE-2016-9842: zlib: Undefined left shift of negative number
- CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
- CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
- CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
- CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher
- CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
- CVE-2017-3533: OpenJDK: newline injection in the FTP client
- CVE-2017-3544: OpenJDK: newline injection in the SMTP client
Patchnames: sdksp4-java-1_7_1-ibm-13123,slessp4-java-1_7_1-ibm-13123
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
72 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for java-1_7_1-ibm fixes the following issues:\n\nVersion update to 7.1-4.5 bsc#1038505\n\n - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n - CVE-2016-9842: zlib: Undefined left shift of negative number\n - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher \n - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp4-java-1_7_1-ibm-13123,slessp4-java-1_7_1-ibm-13123",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1387-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2017:1387-1",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171387-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2017:1387-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002913.html"
},
{
"category": "self",
"summary": "SUSE Bug 1038505",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1289 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3509 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3511 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3533 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3539 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3544/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2017-05-23T13:37:48Z",
"generator": {
"date": "2017-05-23T13:37:48Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2017:1387-1",
"initial_release_date": "2017-05-23T13:37:48Z",
"revision_history": [
{
"date": "2017-05-23T13:37:48Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
},
{
"cve": "CVE-2017-1289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1289"
}
],
"notes": [
{
"category": "general",
"text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1289",
"url": "https://www.suse.com/security/cve/CVE-2017-1289"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-1289",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "moderate"
}
],
"title": "CVE-2017-1289"
},
{
"cve": "CVE-2017-3509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3509"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3509",
"url": "https://www.suse.com/security/cve/CVE-2017-3509"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "moderate"
}
],
"title": "CVE-2017-3509"
},
{
"cve": "CVE-2017-3511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3511"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3511",
"url": "https://www.suse.com/security/cve/CVE-2017-3511"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "important"
}
],
"title": "CVE-2017-3511"
},
{
"cve": "CVE-2017-3533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3533"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3533",
"url": "https://www.suse.com/security/cve/CVE-2017-3533"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "moderate"
}
],
"title": "CVE-2017-3533"
},
{
"cve": "CVE-2017-3539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3539"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3539",
"url": "https://www.suse.com/security/cve/CVE-2017-3539"
},
{
"category": "external",
"summary": "SUSE Bug 1005522 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1005522"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "low"
}
],
"title": "CVE-2017-3539"
},
{
"cve": "CVE-2017-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3544"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3544",
"url": "https://www.suse.com/security/cve/CVE-2017-3544"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:37:48Z",
"details": "important"
}
],
"title": "CVE-2017-3544"
}
]
}
SUSE-SU-2017:1389-1
Vulnerability from csaf_suse - Published: 2017-05-23 13:36 - Updated: 2017-05-23 13:36Summary
Security update for java-1_6_0-ibm
Severity
Important
Notes
Title of the patch: Security update for java-1_6_0-ibm
Description of the patch:
This update for java-1_6_0-ibm fixes the following issues:
- Version update to 6.0-16.45 bsc#1038505
- CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
- CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
- CVE-2016-9842: zlib: Undefined left shift of negative number
- CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
- CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
- CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
- CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
- CVE-2017-3533: OpenJDK: newline injection in the FTP client
- CVE-2017-3544: OpenJDK: newline injection in the SMTP client
- Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183
Patchnames: SUSE-SLE-Module-Legacy-12-2017-843
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.3 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
83 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_6_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for java-1_6_0-ibm fixes the following issues:\n\n- Version update to 6.0-16.45 bsc#1038505\n\n - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n - CVE-2016-9842: zlib: Undefined left shift of negative number\n - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n- Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Legacy-12-2017-843",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1389-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2017:1389-1",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171389-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2017:1389-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html"
},
{
"category": "self",
"summary": "SUSE Bug 1027038",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "self",
"summary": "SUSE Bug 1038505",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1289 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3509 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3514 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3533 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3539 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3544/"
}
],
"title": "Security update for java-1_6_0-ibm",
"tracking": {
"current_release_date": "2017-05-23T13:36:48Z",
"generator": {
"date": "2017-05-23T13:36:48Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2017:1389-1",
"initial_release_date": "2017-05-23T13:36:48Z",
"revision_history": [
{
"date": "2017-05-23T13:36:48Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"product": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"product_id": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"product": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"product_id": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"product": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"product_id": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"product_id": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"product_id": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"product_id": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64",
"product_id": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 12",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2183"
}
],
"notes": [
{
"category": "general",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2183",
"url": "https://www.suse.com/security/cve/CVE-2016-2183"
},
{
"category": "external",
"summary": "SUSE Bug 1001912 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1001912"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1027038 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "external",
"summary": "SUSE Bug 1034689 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1034689"
},
{
"category": "external",
"summary": "SUSE Bug 1056614 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1056614"
},
{
"category": "external",
"summary": "SUSE Bug 1171693 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1171693"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995359 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/995359"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "moderate"
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
},
{
"cve": "CVE-2017-1289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1289"
}
],
"notes": [
{
"category": "general",
"text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1289",
"url": "https://www.suse.com/security/cve/CVE-2017-1289"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-1289",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "moderate"
}
],
"title": "CVE-2017-1289"
},
{
"cve": "CVE-2017-3509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3509"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3509",
"url": "https://www.suse.com/security/cve/CVE-2017-3509"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "moderate"
}
],
"title": "CVE-2017-3509"
},
{
"cve": "CVE-2017-3514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3514"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3514",
"url": "https://www.suse.com/security/cve/CVE-2017-3514"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3514",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3514",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "moderate"
}
],
"title": "CVE-2017-3514"
},
{
"cve": "CVE-2017-3533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3533"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3533",
"url": "https://www.suse.com/security/cve/CVE-2017-3533"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "moderate"
}
],
"title": "CVE-2017-3533"
},
{
"cve": "CVE-2017-3539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3539"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3539",
"url": "https://www.suse.com/security/cve/CVE-2017-3539"
},
{
"category": "external",
"summary": "SUSE Bug 1005522 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1005522"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "low"
}
],
"title": "CVE-2017-3539"
},
{
"cve": "CVE-2017-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3544"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3544",
"url": "https://www.suse.com/security/cve/CVE-2017-3544"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-49.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.45-49.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-23T13:36:48Z",
"details": "important"
}
],
"title": "CVE-2017-3544"
}
]
}
SUSE-SU-2017:1444-1
Vulnerability from csaf_suse - Published: 2017-05-30 11:19 - Updated: 2017-05-30 11:19Summary
Security update for java-1_6_0-ibm
Severity
Important
Notes
Title of the patch: Security update for java-1_6_0-ibm
Description of the patch:
This update for java-1_6_0-ibm fixes the following issues:
- CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
- CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
- CVE-2016-9842: zlib: Undefined left shift of negative number
- CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
- CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
- CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
- CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
- CVE-2017-3533: OpenJDK: newline injection in the FTP client
- CVE-2017-3544: OpenJDK: newline injection in the SMTP client
- Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183
Patchnames: sleposp3-java-1_6_0-ibm-13130,slessp3-java-1_6_0-ibm-13130
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.8 (Critical)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.3 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
83 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_6_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for java-1_6_0-ibm fixes the following issues:\n\n\n - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n - CVE-2016-9842: zlib: Undefined left shift of negative number\n - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n- Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sleposp3-java-1_6_0-ibm-13130,slessp3-java-1_6_0-ibm-13130",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1444-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2017:1444-1",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171444-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2017:1444-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002927.html"
},
{
"category": "self",
"summary": "SUSE Bug 1027038",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "self",
"summary": "SUSE Bug 1038505",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9842 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1289 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3509 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3514 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3533 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3539 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3544/"
}
],
"title": "Security update for java-1_6_0-ibm",
"tracking": {
"current_release_date": "2017-05-30T11:19:09Z",
"generator": {
"date": "2017-05-30T11:19:09Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2017:1444-1",
"initial_release_date": "2017-05-30T11:19:09Z",
"revision_history": [
{
"date": "2017-05-30T11:19:09Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"product": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"product_id": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"product": {
"name": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"product_id": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"product": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"product_id": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"product": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"product_id": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"product": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"product_id": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"product": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"product_id": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"product": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"product_id": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"product": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"product_id": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"product": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"product_id": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"product": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"product_id": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"product_id": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"product_id": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"product_id": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"product_id": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"product": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"product_id": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-pos:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x"
},
"product_reference": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x"
},
"product_reference": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586"
},
"product_reference": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
},
"product_reference": "java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2183"
}
],
"notes": [
{
"category": "general",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2183",
"url": "https://www.suse.com/security/cve/CVE-2016-2183"
},
{
"category": "external",
"summary": "SUSE Bug 1001912 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1001912"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1027038 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "external",
"summary": "SUSE Bug 1034689 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1034689"
},
{
"category": "external",
"summary": "SUSE Bug 1056614 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1056614"
},
{
"category": "external",
"summary": "SUSE Bug 1171693 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1171693"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995359 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/995359"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "moderate"
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9841"
}
],
"notes": [
{
"category": "general",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9841",
"url": "https://www.suse.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1064070 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1064070"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1070162"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9841",
"url": "https://bugzilla.suse.com/1127473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "critical"
}
],
"title": "CVE-2016-9841"
},
{
"cve": "CVE-2016-9842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9842"
}
],
"notes": [
{
"category": "general",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9842",
"url": "https://www.suse.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9842",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "low"
}
],
"title": "CVE-2016-9842"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
},
{
"cve": "CVE-2017-1289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1289"
}
],
"notes": [
{
"category": "general",
"text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1289",
"url": "https://www.suse.com/security/cve/CVE-2017-1289"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-1289",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "moderate"
}
],
"title": "CVE-2017-1289"
},
{
"cve": "CVE-2017-3509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3509"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3509",
"url": "https://www.suse.com/security/cve/CVE-2017-3509"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "moderate"
}
],
"title": "CVE-2017-3509"
},
{
"cve": "CVE-2017-3514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3514"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3514",
"url": "https://www.suse.com/security/cve/CVE-2017-3514"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3514",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3514",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "moderate"
}
],
"title": "CVE-2017-3514"
},
{
"cve": "CVE-2017-3533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3533"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3533",
"url": "https://www.suse.com/security/cve/CVE-2017-3533"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "moderate"
}
],
"title": "CVE-2017-3533"
},
{
"cve": "CVE-2017-3539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3539"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3539",
"url": "https://www.suse.com/security/cve/CVE-2017-3539"
},
{
"category": "external",
"summary": "SUSE Bug 1005522 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1005522"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "low"
}
],
"title": "CVE-2017-3539"
},
{
"cve": "CVE-2017-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3544"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3544",
"url": "https://www.suse.com/security/cve/CVE-2017-3544"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-devel-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.45-84.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.45-84.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-30T11:19:09Z",
"details": "important"
}
],
"title": "CVE-2017-3544"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…