{
  "affected": [],
  "aliases": [
    "CVE-2023-22081"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-10-17T22:15:13Z",
    "severity": "MODERATE"
  },
  "details": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 20.0.2; Oracle GraalVM for JDK: 17.0.8 and  20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
  "id": "GHSA-mp59-54g3-r5r4",
  "modified": "2025-11-04T00:30:40Z",
  "published": "2023-10-18T00:31:41Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22081"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00041.html"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20231027-0006"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20241108-0002"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2023/dsa-5537"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2023/dsa-5548"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2023-22081",
    "id": "GSD-2023-22081"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-22081"
      ],
      "details": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
      "id": "GSD-2023-22081",
      "modified": "2023-12-13T01:20:42.771511Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert_us@oracle.com",
        "ID": "CVE-2023-22081",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Java SE JDK and JRE",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "Oracle Java SE:8u381"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle Java SE:8u381-perf"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle Java SE:11.0.20"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle Java SE:17.0.8"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle Java SE:21"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle GraalVM for JDK:17.0.8"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle GraalVM for JDK:21"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle GraalVM Enterprise Edition:20.3.11"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle GraalVM Enterprise Edition:21.3.7"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle GraalVM Enterprise Edition:22.3.3"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Oracle Corporation"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition."
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.oracle.com/security-alerts/cpuoct2023.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20231027-0006/",
            "refsource": "MISC",
            "url": "https://security.netapp.com/advisory/ntap-20231027-0006/"
          },
          {
            "name": "https://www.debian.org/security/2023/dsa-5537",
            "refsource": "MISC",
            "url": "https://www.debian.org/security/2023/dsa-5537"
          },
          {
            "name": "https://lists.debian.org/debian-lts-announce/2023/10/msg00041.html",
            "refsource": "MISC",
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00041.html"
          },
          {
            "name": "https://www.debian.org/security/2023/dsa-5548",
            "refsource": "MISC",
            "url": "https://www.debian.org/security/2023/dsa-5548"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D5A01042-97E8-483B-BBE2-C9A968423FCD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:21:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3DAC838A-1E97-4D12-9CA9-4593D61CF9FD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update381:*:*:-:*:*:*",
                    "matchCriteriaId": "2950AC81-A9E7-4CC8-A20D-10AEAAD672D1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update381:*:*:enterprise_performance_pack:*:*:*",
                    "matchCriteriaId": "1280B8AA-B341-42DC-BA23-4DD970970570",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jdk:11.0.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "40C0CB6C-5A35-45E8-A481-F437360F6B7A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jdk:17.0.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D07E25C0-81ED-4DA9-85D3-CF2C758D25D4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jdk:21.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "89511E56-D9E1-46D2-A591-EEC11A4194B2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jre:1.8.0:update381:*:*:-:*:*:*",
                    "matchCriteriaId": "9B5F1CAA-26EA-4558-BA69-51D0EB0726DE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jre:1.8.0:update381:*:*:enterprise_performance_pack:*:*:*",
                    "matchCriteriaId": "54EEB032-9164-49FB-97CB-728A64C43495",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jre:11.0.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A824CA38-74B2-43FC-9C72-6CE37B97D59F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jre:17.0.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "25D40D36-9C91-49AB-9120-97A867715E20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jre:21.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5B331904-AF1B-4C47-A664-A257CB16DDEB",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CCAA4004-9319-478C-9D55-0E8307F872F6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3B199052-5732-4726-B06B-A12C70DFB891",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM para JDK de Oracle Java SE (componente: JSSE). Las versiones compatibles que se ven afectadas son Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM para JDK: 17.0.8 y 21. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante no autenticado con acceso a la red a trav\u00e9s de HTTPS comprometer Oracle Java SE y Oracle GraalVM para JDK. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una Denegaci\u00f3n de Servicio parcial (DOS parcial) de Oracle Java SE, Oracle GraalVM para JDK. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, generalmente en clientes que ejecutan aplicaciones Java Web Start en espacio aislado o subprogramas de Java en espacio aislado, que cargan y ejecutan c\u00f3digo que no es de confianza (por ejemplo, c\u00f3digo que proviene de Internet) y dependen del entorno limitado de Java para su seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan s\u00f3lo c\u00f3digo confiable (por ejemplo, c\u00f3digo instalado por un administrador). CVSS 3.1 Puntuaci\u00f3n base 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
          }
        ],
        "id": "CVE-2023-22081",
        "lastModified": "2024-02-16T15:55:30.903",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "secalert_us@oracle.com",
              "type": "Primary"
            }
          ]
        },
        "published": "2023-10-17T22:15:13.573",
        "references": [
          {
            "source": "secalert_us@oracle.com",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00041.html"
          },
          {
            "source": "secalert_us@oracle.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231027-0006/"
          },
          {
            "source": "secalert_us@oracle.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5537"
          },
          {
            "source": "secalert_us@oracle.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5548"
          },
          {
            "source": "secalert_us@oracle.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
          }
        ],
        "sourceIdentifier": "secalert_us@oracle.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Er zijn kwetsbaarheden verholpen in Oracle Siebel CRM.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n* Denial-of-Service (DoS)\n* Toegang tot gevoelige gegevens\n* Toegang tot systeemgegevens\n* Manipulatie van gegevens\n* (Remote) code execution (Gebruikersrechten)",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements Used in a Template Engine",
        "title": "CWE-1336"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Null Byte or NUL Character",
        "title": "CWE-158"
      },
      {
        "category": "general",
        "text": "Integer Coercion Error",
        "title": "CWE-192"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Improper Certificate Validation",
        "title": "CWE-295"
      },
      {
        "category": "general",
        "text": "Missing Cryptographic Step",
        "title": "CWE-325"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
        "title": "CWE-444"
      },
      {
        "category": "general",
        "text": "Deserialization of Untrusted Data",
        "title": "CWE-502"
      },
      {
        "category": "general",
        "text": "Incorrect Conversion between Numeric Types",
        "title": "CWE-681"
      },
      {
        "category": "general",
        "text": "Improper Check for Unusual or Exceptional Conditions",
        "title": "CWE-754"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36090"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-34169"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37434"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42003"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22081"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33201"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41105"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46589"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47627"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5072"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5678"
      },
      {
        "category": "external",
        "summary": "Source - nvd",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5764"
      },
      {
        "category": "external",
        "summary": "Reference - oracle",
        "url": "https://www.oracle.com/docs/tech/security-alerts/cpujul2024csaf.json"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; ibm; nvd; oracle",
        "url": "https://www.oracle.com/security-alerts/cpujul2024.html"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Oracle Siebel CRM",
    "tracking": {
      "current_release_date": "2024-07-17T13:55:31.923970Z",
      "id": "NCSC-2024-0305",
      "initial_release_date": "2024-07-17T13:55:31.923970Z",
      "revision_history": [
        {
          "date": "2024-07-17T13:55:31.923970Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "siebel_crm_cloud_applications",
            "product": {
              "name": "siebel_crm_cloud_applications",
              "product_id": "CSAFPID-1503695",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:siebel_crm_cloud_applications:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siebel_crm_deployment",
            "product": {
              "name": "siebel_crm_deployment",
              "product_id": "CSAFPID-1503697",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:siebel_crm_deployment:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siebel_crm_end_user",
            "product": {
              "name": "siebel_crm_end_user",
              "product_id": "CSAFPID-1503700",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:siebel_crm_end_user:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siebel_crm_integration",
            "product": {
              "name": "siebel_crm_integration",
              "product_id": "CSAFPID-1503702",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:siebel_crm_integration:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siebel_crm",
            "product": {
              "name": "siebel_crm",
              "product_id": "CSAFPID-764293",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:siebel_crm:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siebel_crm",
            "product": {
              "name": "siebel_crm",
              "product_id": "CSAFPID-345046",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:siebel_crm:23.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siebel_crm",
            "product": {
              "name": "siebel_crm",
              "product_id": "CSAFPID-220191",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:siebel_crm:23.5:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "oracle"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-36090",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2021-36090",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-36090.json"
        }
      ],
      "title": "CVE-2021-36090"
    },
    {
      "cve": "CVE-2022-34169",
      "cwe": {
        "id": "CWE-192",
        "name": "Integer Coercion Error"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Coercion Error",
          "title": "CWE-192"
        },
        {
          "category": "other",
          "text": "Incorrect Conversion between Numeric Types",
          "title": "CWE-681"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-34169",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-34169.json"
        }
      ],
      "title": "CVE-2022-34169"
    },
    {
      "cve": "CVE-2022-37434",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-37434",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-37434.json"
        }
      ],
      "title": "CVE-2022-37434"
    },
    {
      "cve": "CVE-2022-42003",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        },
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-42003",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-42003.json"
        }
      ],
      "title": "CVE-2022-42003"
    },
    {
      "cve": "CVE-2023-5072",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-5072",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5072.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-764293",
            "CSAFPID-1503695",
            "CSAFPID-1503697",
            "CSAFPID-1503700",
            "CSAFPID-1503702"
          ]
        }
      ],
      "title": "CVE-2023-5072"
    },
    {
      "cve": "CVE-2023-5678",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Check for Unusual or Exceptional Conditions",
          "title": "CWE-754"
        },
        {
          "category": "other",
          "text": "Missing Cryptographic Step",
          "title": "CWE-325"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-5678",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5678.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1503695",
            "CSAFPID-1503697",
            "CSAFPID-1503700",
            "CSAFPID-1503702"
          ]
        }
      ],
      "title": "CVE-2023-5678"
    },
    {
      "cve": "CVE-2023-5764",
      "cwe": {
        "id": "CWE-1336",
        "name": "Improper Neutralization of Special Elements Used in a Template Engine"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements Used in a Template Engine",
          "title": "CWE-1336"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-5764",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5764.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1503695",
            "CSAFPID-1503697",
            "CSAFPID-1503700",
            "CSAFPID-1503702"
          ]
        }
      ],
      "title": "CVE-2023-5764"
    },
    {
      "cve": "CVE-2023-22081",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Certificate Validation",
          "title": "CWE-295"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-22081",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-22081.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-764293",
            "CSAFPID-1503695",
            "CSAFPID-1503697",
            "CSAFPID-1503700",
            "CSAFPID-1503702"
          ]
        }
      ],
      "title": "CVE-2023-22081"
    },
    {
      "cve": "CVE-2023-33201",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-33201",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-33201.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-764293",
            "CSAFPID-1503695",
            "CSAFPID-1503697",
            "CSAFPID-1503700",
            "CSAFPID-1503702"
          ]
        }
      ],
      "title": "CVE-2023-33201"
    },
    {
      "cve": "CVE-2023-41105",
      "cwe": {
        "id": "CWE-158",
        "name": "Improper Neutralization of Null Byte or NUL Character"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Null Byte or NUL Character",
          "title": "CWE-158"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-41105",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-41105.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-764293",
            "CSAFPID-1503695",
            "CSAFPID-1503697",
            "CSAFPID-1503700",
            "CSAFPID-1503702"
          ]
        }
      ],
      "title": "CVE-2023-41105"
    },
    {
      "cve": "CVE-2023-46589",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
          "title": "CWE-444"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-764293",
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-46589",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46589.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-764293",
            "CSAFPID-1503695",
            "CSAFPID-1503697",
            "CSAFPID-1503700",
            "CSAFPID-1503702"
          ]
        }
      ],
      "title": "CVE-2023-46589"
    },
    {
      "cve": "CVE-2023-47627",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
          "title": "CWE-444"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1503695",
          "CSAFPID-1503697",
          "CSAFPID-1503700",
          "CSAFPID-1503702"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-47627",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-47627.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1503695",
            "CSAFPID-1503697",
            "CSAFPID-1503700",
            "CSAFPID-1503702"
          ]
        }
      ],
      "title": "CVE-2023-47627"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-11-openjdk-11.0.21.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-11-openjdk-11.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13342",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13342-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22081 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22081/"
      }
    ],
    "title": "java-11-openjdk-11.0.21.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13342-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openjdk-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-demo-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-demo-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-demo-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-devel-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-devel-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-devel-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-headless-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-headless-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-headless-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-jmods-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-jmods-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-jmods-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-src-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-src-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-src-11.0.21.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openjdk-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-demo-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-demo-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-demo-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-devel-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-devel-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-devel-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-headless-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-headless-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-headless-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-src-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-src-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-src-11.0.21.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openjdk-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openjdk-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-demo-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-demo-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openjdk-demo-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-devel-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-devel-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openjdk-devel-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-headless-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-headless-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openjdk-headless-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openjdk-javadoc-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-jmods-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-jmods-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openjdk-jmods-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-src-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-src-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openjdk-src-11.0.21.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openjdk-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-demo-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-demo-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-demo-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-devel-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-devel-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-devel-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-headless-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-headless-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-headless-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-jmods-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-jmods-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-jmods-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-src-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-src-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-src-11.0.21.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-demo-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-demo-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-demo-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-demo-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-demo-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-demo-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-demo-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-demo-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-devel-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-devel-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-devel-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-devel-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-devel-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-devel-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-devel-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-devel-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-headless-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-headless-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-headless-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-headless-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-headless-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-headless-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-headless-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-headless-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-javadoc-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-jmods-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-jmods-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-jmods-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-jmods-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-jmods-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-jmods-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-src-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-src-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-src-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-src-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-src-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-src-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-src-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-src-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22081",
          "url": "https://www.suse.com/security/cve/CVE-2023-22081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216374 for CVE-2023-22081",
          "url": "https://bugzilla.suse.com/1216374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.21.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22081"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-17-openjdk-17.0.9.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-17-openjdk-17.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13351",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13351-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22025 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22025/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22081 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22081/"
      }
    ],
    "title": "java-17-openjdk-17.0.9.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13351-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-demo-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-devel-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-headless-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-jmods-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-src-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-src-17.0.9.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-demo-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-devel-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-headless-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-src-17.0.9.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openjdk-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openjdk-demo-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openjdk-devel-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openjdk-headless-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openjdk-javadoc-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openjdk-jmods-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-src-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openjdk-src-17.0.9.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-demo-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-devel-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-headless-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-jmods-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-src-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-src-17.0.9.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-demo-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-devel-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-headless-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-src-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-src-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-src-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22025",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22025"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22025",
          "url": "https://www.suse.com/security/cve/CVE-2023-22025"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216339 for CVE-2023-22025",
          "url": "https://bugzilla.suse.com/1216339"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2023-22025"
    },
    {
      "cve": "CVE-2023-22081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22081",
          "url": "https://www.suse.com/security/cve/CVE-2023-22081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216374 for CVE-2023-22081",
          "url": "https://bugzilla.suse.com/1216374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22081"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-21-openjdk-21.0.1.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-21-openjdk-21.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13357",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13357-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22025 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22025/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22081 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22081/"
      }
    ],
    "title": "java-21-openjdk-21.0.1.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13357-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-21.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-21.0.1.0-1.1.aarch64",
                  "product_id": "java-21-openjdk-21.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
                  "product_id": "java-21-openjdk-demo-21.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
                  "product_id": "java-21-openjdk-devel-21.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
                  "product_id": "java-21-openjdk-headless-21.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
                  "product_id": "java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
                  "product_id": "java-21-openjdk-jmods-21.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-src-21.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-src-21.0.1.0-1.1.aarch64",
                  "product_id": "java-21-openjdk-src-21.0.1.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-21.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-21.0.1.0-1.1.ppc64le",
                  "product_id": "java-21-openjdk-21.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
                  "product_id": "java-21-openjdk-demo-21.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
                  "product_id": "java-21-openjdk-devel-21.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
                  "product_id": "java-21-openjdk-headless-21.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
                  "product_id": "java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
                  "product_id": "java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
                  "product_id": "java-21-openjdk-src-21.0.1.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-21.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-21.0.1.0-1.1.s390x",
                  "product_id": "java-21-openjdk-21.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-demo-21.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-demo-21.0.1.0-1.1.s390x",
                  "product_id": "java-21-openjdk-demo-21.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-devel-21.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-devel-21.0.1.0-1.1.s390x",
                  "product_id": "java-21-openjdk-devel-21.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-headless-21.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-headless-21.0.1.0-1.1.s390x",
                  "product_id": "java-21-openjdk-headless-21.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
                  "product_id": "java-21-openjdk-javadoc-21.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
                  "product_id": "java-21-openjdk-jmods-21.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-src-21.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-src-21.0.1.0-1.1.s390x",
                  "product_id": "java-21-openjdk-src-21.0.1.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-21.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-21.0.1.0-1.1.x86_64",
                  "product_id": "java-21-openjdk-21.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
                  "product_id": "java-21-openjdk-demo-21.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
                  "product_id": "java-21-openjdk-devel-21.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
                  "product_id": "java-21-openjdk-headless-21.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
                  "product_id": "java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
                  "product_id": "java-21-openjdk-jmods-21.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-src-21.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-src-21.0.1.0-1.1.x86_64",
                  "product_id": "java-21-openjdk-src-21.0.1.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-21.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-21.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-21.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-21.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-21.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.s390x"
        },
        "product_reference": "java-21-openjdk-21.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-21.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-21.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-demo-21.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-demo-21.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-demo-21.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.s390x"
        },
        "product_reference": "java-21-openjdk-demo-21.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-demo-21.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-devel-21.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-devel-21.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-devel-21.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.s390x"
        },
        "product_reference": "java-21-openjdk-devel-21.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-devel-21.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-headless-21.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-headless-21.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-headless-21.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.s390x"
        },
        "product_reference": "java-21-openjdk-headless-21.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-headless-21.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.s390x"
        },
        "product_reference": "java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-jmods-21.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-jmods-21.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.s390x"
        },
        "product_reference": "java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-jmods-21.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-src-21.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-src-21.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-src-21.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-src-21.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.s390x"
        },
        "product_reference": "java-21-openjdk-src-21.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-src-21.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-src-21.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22025",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22025"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22025",
          "url": "https://www.suse.com/security/cve/CVE-2023-22025"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216339 for CVE-2023-22025",
          "url": "https://bugzilla.suse.com/1216339"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2023-22025"
    },
    {
      "cve": "CVE-2023-22081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22081",
          "url": "https://www.suse.com/security/cve/CVE-2023-22081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216374 for CVE-2023-22081",
          "url": "https://bugzilla.suse.com/1216374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-demo-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-devel-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-headless-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-javadoc-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-jmods-21.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-21-openjdk-src-21.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22081"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-1_8_0-openjdk-1.8.0.392-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.392-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13421",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13421-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22067 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22067/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22081 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22081/"
      }
    ],
    "title": "java-1_8_0-openjdk-1.8.0.392-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13421-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
                "product": {
                  "name": "java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
                  "product_id": "java-1_8_0-openjdk-1.8.0.392-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
                "product": {
                  "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
                  "product_id": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
                "product": {
                  "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
                  "product_id": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
                "product": {
                  "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
                  "product_id": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
                "product": {
                  "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
                  "product_id": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
                "product": {
                  "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
                  "product_id": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
                "product": {
                  "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
                  "product_id": "java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
                  "product_id": "java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
                  "product_id": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
                  "product_id": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
                  "product_id": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
                  "product_id": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
                  "product_id": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
                  "product_id": "java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
                "product": {
                  "name": "java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
                  "product_id": "java-1_8_0-openjdk-1.8.0.392-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
                "product": {
                  "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
                  "product_id": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
                "product": {
                  "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
                  "product_id": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
                "product": {
                  "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
                  "product_id": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
                "product": {
                  "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
                  "product_id": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
                "product": {
                  "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
                  "product_id": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
                "product": {
                  "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
                  "product_id": "java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
                  "product_id": "java-1_8_0-openjdk-1.8.0.392-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
                  "product_id": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
                  "product_id": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
                  "product_id": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
                  "product_id": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
                  "product_id": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64",
                  "product_id": "java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-1.8.0.392-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.aarch64"
        },
        "product_reference": "java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le"
        },
        "product_reference": "java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-1.8.0.392-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.s390x"
        },
        "product_reference": "java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-1.8.0.392-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64"
        },
        "product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le"
        },
        "product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x"
        },
        "product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64"
        },
        "product_reference": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le"
        },
        "product_reference": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x"
        },
        "product_reference": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64"
        },
        "product_reference": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le"
        },
        "product_reference": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x"
        },
        "product_reference": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64"
        },
        "product_reference": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le"
        },
        "product_reference": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x"
        },
        "product_reference": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64"
        },
        "product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le"
        },
        "product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x"
        },
        "product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64"
        },
        "product_reference": "java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le"
        },
        "product_reference": "java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x"
        },
        "product_reference": "java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22067",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22067"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and  21.3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22067",
          "url": "https://www.suse.com/security/cve/CVE-2023-22067"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216379 for CVE-2023-22067",
          "url": "https://bugzilla.suse.com/1216379"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22067"
    },
    {
      "cve": "CVE-2023-22081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
          "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22081",
          "url": "https://www.suse.com/security/cve/CVE-2023-22081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216374 for CVE-2023-22081",
          "url": "https://bugzilla.suse.com/1216374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.392-1.1.x86_64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.aarch64",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.ppc64le",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.s390x",
            "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.392-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22081"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-11-openj9-11.0.21.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-11-openj9-11.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13455",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13455-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22081 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5676 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5676/"
      }
    ],
    "title": "java-11-openj9-11.0.21.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13455-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openj9-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openj9-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openj9-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-demo-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openj9-demo-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openj9-demo-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-devel-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openj9-devel-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openj9-devel-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-headless-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openj9-headless-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openj9-headless-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openj9-javadoc-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openj9-jmods-11.0.21.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-src-11.0.21.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openj9-src-11.0.21.0-1.1.aarch64",
                  "product_id": "java-11-openj9-src-11.0.21.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openj9-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openj9-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openj9-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openj9-demo-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openj9-devel-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openj9-headless-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openj9-jmods-11.0.21.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-src-11.0.21.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openj9-src-11.0.21.0-1.1.ppc64le",
                  "product_id": "java-11-openj9-src-11.0.21.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openj9-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openj9-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openj9-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-demo-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openj9-demo-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openj9-demo-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-devel-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openj9-devel-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openj9-devel-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-headless-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openj9-headless-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openj9-headless-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openj9-javadoc-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-jmods-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openj9-jmods-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openj9-jmods-11.0.21.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-src-11.0.21.0-1.1.s390x",
                "product": {
                  "name": "java-11-openj9-src-11.0.21.0-1.1.s390x",
                  "product_id": "java-11-openj9-src-11.0.21.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openj9-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openj9-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openj9-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-demo-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openj9-demo-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openj9-demo-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-devel-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openj9-devel-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openj9-devel-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-headless-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openj9-headless-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openj9-headless-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openj9-javadoc-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openj9-jmods-11.0.21.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openj9-src-11.0.21.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openj9-src-11.0.21.0-1.1.x86_64",
                  "product_id": "java-11-openj9-src-11.0.21.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openj9-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openj9-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openj9-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openj9-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-demo-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openj9-demo-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-demo-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-demo-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openj9-demo-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-demo-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openj9-demo-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-devel-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openj9-devel-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-devel-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-devel-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openj9-devel-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-devel-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openj9-devel-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-headless-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openj9-headless-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-headless-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-headless-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openj9-headless-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-headless-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openj9-headless-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-javadoc-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-javadoc-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-javadoc-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-jmods-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-jmods-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-jmods-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openj9-jmods-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-jmods-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-src-11.0.21.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.aarch64"
        },
        "product_reference": "java-11-openj9-src-11.0.21.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-src-11.0.21.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openj9-src-11.0.21.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-src-11.0.21.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.s390x"
        },
        "product_reference": "java-11-openj9-src-11.0.21.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openj9-src-11.0.21.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.x86_64"
        },
        "product_reference": "java-11-openj9-src-11.0.21.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22081",
          "url": "https://www.suse.com/security/cve/CVE-2023-22081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216374 for CVE-2023-22081",
          "url": "https://bugzilla.suse.com/1216374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22081"
    },
    {
      "cve": "CVE-2023-5676",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5676"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5676",
          "url": "https://www.suse.com/security/cve/CVE-2023-5676"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217214 for CVE-2023-5676",
          "url": "https://bugzilla.suse.com/1217214"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-demo-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-devel-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-headless-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-javadoc-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-jmods-11.0.21.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openj9-src-11.0.21.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-5676"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-17-openj9-17.0.9.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-17-openj9-17.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13456",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13456-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22025 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22025/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22081 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5676 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5676/"
      }
    ],
    "title": "java-17-openj9-17.0.9.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13456-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openj9-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openj9-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openj9-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-demo-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openj9-demo-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openj9-demo-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-devel-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openj9-devel-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openj9-devel-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-headless-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openj9-headless-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openj9-headless-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openj9-javadoc-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openj9-jmods-17.0.9.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-src-17.0.9.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openj9-src-17.0.9.0-1.1.aarch64",
                  "product_id": "java-17-openj9-src-17.0.9.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openj9-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openj9-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openj9-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openj9-demo-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openj9-devel-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openj9-headless-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openj9-jmods-17.0.9.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-src-17.0.9.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openj9-src-17.0.9.0-1.1.ppc64le",
                  "product_id": "java-17-openj9-src-17.0.9.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openj9-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openj9-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openj9-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-demo-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openj9-demo-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openj9-demo-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-devel-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openj9-devel-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openj9-devel-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-headless-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openj9-headless-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openj9-headless-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openj9-javadoc-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-jmods-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openj9-jmods-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openj9-jmods-17.0.9.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-src-17.0.9.0-1.1.s390x",
                "product": {
                  "name": "java-17-openj9-src-17.0.9.0-1.1.s390x",
                  "product_id": "java-17-openj9-src-17.0.9.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openj9-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openj9-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openj9-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-demo-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openj9-demo-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openj9-demo-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-devel-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openj9-devel-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openj9-devel-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-headless-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openj9-headless-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openj9-headless-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openj9-javadoc-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openj9-jmods-17.0.9.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openj9-src-17.0.9.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openj9-src-17.0.9.0-1.1.x86_64",
                  "product_id": "java-17-openj9-src-17.0.9.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openj9-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openj9-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openj9-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openj9-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-demo-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openj9-demo-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-demo-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-demo-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openj9-demo-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-demo-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openj9-demo-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-devel-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openj9-devel-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-devel-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-devel-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openj9-devel-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-devel-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openj9-devel-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-headless-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openj9-headless-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-headless-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-headless-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openj9-headless-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-headless-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openj9-headless-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-javadoc-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-javadoc-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-javadoc-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-jmods-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-jmods-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-jmods-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openj9-jmods-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-jmods-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-src-17.0.9.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64"
        },
        "product_reference": "java-17-openj9-src-17.0.9.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-src-17.0.9.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openj9-src-17.0.9.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-src-17.0.9.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x"
        },
        "product_reference": "java-17-openj9-src-17.0.9.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openj9-src-17.0.9.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
        },
        "product_reference": "java-17-openj9-src-17.0.9.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22025",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22025"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22025",
          "url": "https://www.suse.com/security/cve/CVE-2023-22025"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216339 for CVE-2023-22025",
          "url": "https://bugzilla.suse.com/1216339"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2023-22025"
    },
    {
      "cve": "CVE-2023-22081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22081",
          "url": "https://www.suse.com/security/cve/CVE-2023-22081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216374 for CVE-2023-22081",
          "url": "https://bugzilla.suse.com/1216374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22081"
    },
    {
      "cve": "CVE-2023-5676",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5676"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5676",
          "url": "https://www.suse.com/security/cve/CVE-2023-5676"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217214 for CVE-2023-5676",
          "url": "https://bugzilla.suse.com/1217214"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-demo-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-devel-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-headless-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-javadoc-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-jmods-17.0.9.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openj9-src-17.0.9.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-5676"
    }
  ]
}