{"affected":[{"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.5.0-3.36.1","java-11-openjdk-demo":"11.0.5.0-3.36.1","java-11-openjdk-devel":"11.0.5.0-3.36.1","java-11-openjdk-headless":"11.0.5.0-3.36.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","name":"java-11-openjdk","purl":"purl:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"11.0.5.0-3.36.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.5.0-3.36.1","java-11-openjdk-demo":"11.0.5.0-3.36.1","java-11-openjdk-devel":"11.0.5.0-3.36.1","java-11-openjdk-headless":"11.0.5.0-3.36.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","name":"java-11-openjdk","purl":"purl:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"11.0.5.0-3.36.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:\n\nSecurity issues fixed (October 2019 CPU  bsc#1154212):\t  \n\n- CVE-2019-2933: Windows file handling redux\n- CVE-2019-2945: Better socket support\n- CVE-2019-2949: Better Kerberos ccache handling\n- CVE-2019-2958: Build Better Processes\n- CVE-2019-2964: Better support for patterns\n- CVE-2019-2962: Better Glyph Images\n- CVE-2019-2973: Better pattern compilation\n- CVE-2019-2975: Unexpected exception in jjs\n- CVE-2019-2978: Improved handling of jar files\n- CVE-2019-2977: Improve String index handling\n- CVE-2019-2981: Better Path supports\n- CVE-2019-2983: Better serial attributes\n- CVE-2019-2987: Better rendering of native glyphs\n- CVE-2019-2988: Better Graphics2D drawing\n- CVE-2019-2989: Improve TLS connection support\n- CVE-2019-2992: Enhance font glyph mapping\n- CVE-2019-2999: Commentary on Javadoc comments\n- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).\n","id":"SUSE-SU-2019:2998-1","modified":"2019-11-18T14:17:26Z","published":"2019-11-18T14:17:26Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192998-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1152856"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154212"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2894"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2933"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2945"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2949"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2958"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2962"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2964"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2973"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2975"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2977"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2978"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2981"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2983"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2987"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2988"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2989"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2992"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-2999"}],"related":["CVE-2019-2894","CVE-2019-2933","CVE-2019-2945","CVE-2019-2949","CVE-2019-2958","CVE-2019-2962","CVE-2019-2964","CVE-2019-2973","CVE-2019-2975","CVE-2019-2977","CVE-2019-2978","CVE-2019-2981","CVE-2019-2983","CVE-2019-2987","CVE-2019-2988","CVE-2019-2989","CVE-2019-2992","CVE-2019-2999"],"summary":"Security update for java-11-openjdk"}