RHSA-2018:3521
Vulnerability from csaf_opensuse - Published: 2018-11-07 00:00 - Updated: 2026-09-20 11:02| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for java-11-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2018:3521.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2018:3521.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2018:3521",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2018_3521.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3150 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3180 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3183 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3183/"
}
],
"title": "security update for java-11-openjdk",
"tracking": {
"current_release_date": "2026-09-20T11:02:01Z",
"generator": {
"date": "2018-11-07T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2018:3521",
"initial_release_date": "2018-11-07T00:00:00Z",
"revision_history": [
{
"date": "2018-11-07T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:02:01Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-debug@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-demo@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-demo-debug@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-devel@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-devel-debug@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-headless@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-headless-debug@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-javadoc@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-javadoc-debug@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-javadoc-zip@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-javadoc-zip-debug@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-jmods@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-jmods-debug@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-src@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"product": {
"name": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"product_id": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-src-debug@11.0.1.13-3.el7_6?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-debug@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-demo@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-demo-debug@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-devel@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-devel-debug@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-headless@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-headless-debug@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-javadoc@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-javadoc-debug@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-javadoc-zip@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-javadoc-zip-debug@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-jmods@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-jmods-debug@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1.13:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/java-11-openjdk-src@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1\u0026upstream=java-11-openjdk-1:11.0.1.13-3.el7_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64",
"product": {
"name": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_id": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-11-openjdk-src-debug@11.0.1.13-3.el7_6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686"
},
"product_reference": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
},
"product_reference": "java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-3136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3136"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3136",
"url": "https://www.suse.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3136"
},
{
"cve": "CVE-2018-3139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3139"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3139",
"url": "https://www.suse.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3139"
},
{
"cve": "CVE-2018-3149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3149"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3149",
"url": "https://www.suse.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3149"
},
{
"cve": "CVE-2018-3150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3150"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3150",
"url": "https://www.suse.com/security/cve/CVE-2018-3150"
},
{
"category": "external",
"summary": "SUSE Bug 1112145 for CVE-2018-3150",
"url": "https://bugzilla.suse.com/1112145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3150"
},
{
"cve": "CVE-2018-3169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3169"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3169",
"url": "https://www.suse.com/security/cve/CVE-2018-3169"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3169"
},
{
"cve": "CVE-2018-3180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3180"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3180",
"url": "https://www.suse.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112147 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3180"
},
{
"cve": "CVE-2018-3183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3183"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3183",
"url": "https://www.suse.com/security/cve/CVE-2018-3183"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1116574"
},
{
"category": "external",
"summary": "SUSE Bug 1120714 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1120714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-devel-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-headless-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-javadoc-zip-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-jmods-debug-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-1:11.0.1.13-3.el7_6.x86_64",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.i686",
"SUSE Liberty Linux 7:java-11-openjdk-src-debug-1:11.0.1.13-3.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-07T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-3183"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.