rpm package

suse/java-11-openjdk&distro=SUSE Linux Enterprise Module for Basesystem 15

pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Vulnerabilities (34)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2019-2958	Med	5.9	< 11.0.5.0-3.36.1	11.0.5.0-3.36.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-2949	Med	6.8	< 11.0.5.0-3.36.1	11.0.5.0-3.36.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-2945	Low	3.1	< 11.0.5.0-3.36.1	11.0.5.0-3.36.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2933	Low	3.1	< 11.0.5.0-3.36.1	11.0.5.0-3.36.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-2894	Low	3.7	< 11.0.5.0-3.36.1	11.0.5.0-3.36.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-2821	Med	5.3	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Jul 23, 2019	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful att
CVE-2019-2818	Low	3.1	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Jul 23, 2019	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java
CVE-2019-2816	Med	4.8	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi
CVE-2019-2786	Low	3.4	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2769	Med	5.3	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with
CVE-2019-2766	Low	3.1	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi
CVE-2019-2762	Med	5.3	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with
CVE-2019-2745	Med	5.1	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Jul 23, 2019	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes
CVE-2019-7317	Med	5.3	< 11.0.4.0-3.33.1	11.0.4.0-3.33.1	Feb 4, 2019	png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

CVE-2019-2958MedOct 16, 2019
affected < 11.0.5.0-3.36.1fixed 11.0.5.0-3.36.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-2949MedOct 16, 2019
affected < 11.0.5.0-3.36.1fixed 11.0.5.0-3.36.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-2945LowOct 16, 2019
affected < 11.0.5.0-3.36.1fixed 11.0.5.0-3.36.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2933LowOct 16, 2019
affected < 11.0.5.0-3.36.1fixed 11.0.5.0-3.36.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-2894LowOct 16, 2019
affected < 11.0.5.0-3.36.1fixed 11.0.5.0-3.36.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-2821MedJul 23, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful att
CVE-2019-2818LowJul 23, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java
CVE-2019-2816MedJul 23, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi
CVE-2019-2786LowJul 23, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2769MedJul 23, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with
CVE-2019-2766LowJul 23, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi
CVE-2019-2762MedJul 23, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with
CVE-2019-2745MedJul 23, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes
CVE-2019-7317MedFeb 4, 2019
affected < 11.0.4.0-3.33.1fixed 11.0.4.0-3.33.1
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Page 2 of 2