{"id":"SUSE-SU-2023:3287-1","summary":"Security update for java-11-openjdk","details":"This update for java-11-openjdk fixes the following issues:\n\n  Updated to jdk-11.0.20+8 (July 2023 CPU):\n\n  - CVE-2023-22006: Fixed vulnerability in the network component (bsc#1213473).\n  - CVE-2023-22036: Fixed vulnerability in the utility component (bsc#1213474).\n  - CVE-2023-22041: Fixed vulnerability in the hotspot component (bsc#1213475).\n  - CVE-2023-22044: Fixed vulnerability in the hotspot component (bsc#1213479).\n  - CVE-2023-22045: Fixed vulnerability in the hotspot component (bsc#1213481).\n  - CVE-2023-22049: Fixed vulnerability in the libraries component (bsc#1213482).\n  - CVE-2023-25193: Fixed vulnerability in the embedded harfbuzz module (bsc#1207922).\n\n  - JDK-8298676: Enhanced Look and Feel\n  - JDK-8300285: Enhance TLS data handling\n  - JDK-8300596: Enhance Jar Signature validation\n  - JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1\n  - JDK-8302475: Enhance HTTP client file downloading\n  - JDK-8302483: Enhance ZIP performance\n  - JDK-8303376: Better launching of JDI\n  - JDK-8304468: Better array usages\n  - JDK-8305312: Enhanced path handling\n  - JDK-8308682: Enhance AES performance\n\n  Bugfixes:\n\n  - JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with\n    Stream closed\n  - JDK-8178806: Better exception logging in crypto code\n  - JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed\n    out\n  - JDK-8209167: Use CLDR's time zone mappings for Windows\n  - JDK-8209546: Make sun/security/tools/keytool/autotest.sh to\n    support macosx\n  - JDK-8209880: tzdb.dat is not reproducibly built\n  - JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java\n    fails\n  - JDK-8214459: NSS source should be removed\n  - JDK-8214807: Improve handling of very old class files\n  - JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from\n    tests\n  - JDK-8215575: C2 crash: assert(get_instanceKlass()-\u003eis_loaded())\n    failed: must be at least loaded\n  - JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle\n  - JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java\n    fails with AssertionError\n  - JDK-8232853: AuthenticationFilter.Cache::remove may throw\n    ConcurrentModificationException\n  - JDK-8243936: NonWriteable system properties are actually\n    writeable\n  - JDK-8246383: NullPointerException in\n    JceSecurity.getVerificationResult when using Entrust provider\n  - JDK-8248701: On Windows generated modules-deps.gmk can\n    contain backslash-r (CR) characters\n  - JDK-8257856: Make ClassFileVersionsTest.java robust to JDK\n    version updates\n  - JDK-8259530: Generated docs contain MIT/GPL-licenced works\n    without reproducing the licence\n  - JDK-8263420: Incorrect function name in\n    NSAccessibilityStaticText native peer implementation\n  - JDK-8264290: Create implementation for\n    NSAccessibilityComponentGroup protocol peer\n  - JDK-8264304: Create implementation for NSAccessibilityToolbar\n    protocol peer\n  - JDK-8265486: ProblemList javax/sound/midi/Sequencer/\n    /Recording.java on macosx-aarch64\n  - JDK-8268558: [TESTBUG] Case 2 in\n    TestP11KeyFactoryGetRSAKeySpec is skipped\n  - JDK-8269746: C2: assert(!in-\u003eis_CFG()) failed: CFG Node with\n    no controlling input?\n  - JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile\n  - JDK-8275233: Incorrect line number reported in exception\n    stack trace thrown from a lambda expression\n  - JDK-8275721: Name of UTC timezone in a locale changes\n    depending on previous code\n  - JDK-8275735: [linux] Remove deprecated Metrics api (kernel\n    memory limit)\n  - JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir\n    as unnecessary\n  - JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -\n    add 4357905\n  - JDK-8278434: timeouts in test java/time/test/java/time/format/\n    /TestZoneTextPrinterParser.java\n  - JDK-8280703: CipherCore.doFinal(...) causes potentially\n    massive byte[] allocations during decryption\n  - JDK-8282077: PKCS11 provider C_sign() impl should handle\n    CKR_BUFFER_TOO_SMALL error\n  - JDK-8282201: Consider removal of expiry check in\n    VerifyCACerts.java test\n  - JDK-8282467: add extra diagnostics for JDK-8268184\n  - JDK-8282600: SSLSocketImpl should not use user_canceled\n    workaround when not necessary\n  - JDK-8283059: Uninitialized warning in check_code.c with GCC\n    11.2\n  - JDK-8285497: Add system property for Java SE specification\n    maintenance version\n  - JDK-8286398: Address possibly lossy conversions in\n    jdk.internal.le\n  - JDK-8287007: [cgroups] Consistently use stringStream\n    throughout parsing code\n  - JDK-8287246: DSAKeyValue should check for missing params\n    instead of relying on KeyFactory provider\n  - JDK-8287876: The recently de-problemlisted\n    TestTitledBorderLeak test is unstable\n  - JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md\n    with information on 4th party dependencies\n  - JDK-8289301: P11Cipher should not throw out of bounds\n    exception during padding\n  - JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space\n  - JDK-8291226: Create Test Cases to cover scenarios for\n    JDK-8278067\n  - JDK-8291637: HttpClient default keep alive timeout not\n    followed if server sends invalid value\n  - JDK-8291638: Keep-Alive timeout of 0 should close connection\n    immediately\n  - JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()\n    is lower than expected\n  - JDK-8293232: Fix race condition in pkcs11 SessionManager\n  - JDK-8293815: P11PSSSignature.engineUpdate should not print\n    debug messages during normal operation\n  - JDK-8294548: Problem list SA core file tests on macosx-x64\n    due to JDK-8294316\n  - JDK-8294906: Memory leak in PKCS11 NSS TLS server\n  - JDK-8295974: jni_FatalError and Xcheck:jni warnings should\n    print the native stack when there are no Java frames\n  - JDK-8296934: Write a test to verify whether Undecorated Frame\n    can be iconified or not\n  - JDK-8297000: [jib] Add more friendly warning for proxy issues\n  - JDK-8297450: ScaledTextFieldBorderTest.java fails when run\n    with -show parameter\n  - JDK-8298887: On the latest macOS+XCode the Robot API may\n    report wrong colors\n  - JDK-8299259: C2: Div/Mod nodes without zero check could be\n    split through iv phi of loop resulting in SIGFPE\n  - JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy\n    due to constant NULL src argument\n  - JDK-8300205: Swing test bug8078268 make latch timeout\n    configurable\n  - JDK-8300490: Spaces in name of MacOS Code Signing Identity\n    are not correctly handled after JDK-8293550\n  - JDK-8301119: Support for GB18030-2022\n  - JDK-8301170: perfMemory_windows.cpp add free_security_attr to\n    early returns\n  - JDK-8301401: Allow additional characters for GB18030-2022\n    support\n  - JDK-8302151: BMPImageReader throws an exception reading BMP\n    images\n  - JDK-8302791: Add specific ClassLoader object to Proxy\n    IllegalArgumentException message\n  - JDK-8303102: jcmd: ManagementAgent.status truncates the text\n    longer than O_BUFLEN\n  - JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m\n    needs CFRelease call in early potential CHECK_NULL return\n  - JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20\n  - JDK-8303440: The 'ZonedDateTime.parse' may not accept the\n    'UTC+XX' zone id\n  - JDK-8303465: KeyStore of type KeychainStore, provider Apple\n    does not show all trusted certificates\n  - JDK-8303476: Add the runtime version in the release file of a\n    JDK image\n  - JDK-8303482: Update LCMS to 2.15\n  - JDK-8303564: C2: 'Bad graph detected in build_loop_late'\n    after a CMove is wrongly split thru phi\n  - JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs\n    CFRelease call in early potential CHECK_NULL return\n  - JDK-8303822: gtestMain should give more helpful output\n  - JDK-8303861: Error handling step timeouts should never be\n    blocked by OnError and others\n  - JDK-8303937: Corrupted heap dumps due to missing retries for\n    os::write()\n  - JDK-8304134: jib bootstrapper fails to quote filename when\n    checking download filetype\n  - JDK-8304291: [AIX] Broken build after JDK-8301998\n  - JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998\n  - JDK-8304350: Font.getStringBounds calculates wrong width for\n    TextAttribute.TRACKING other than 0.0\n  - JDK-8304760: Add 2 Microsoft TLS roots\n  - JDK-8305113: (tz) Update Timezone Data to 2023c\n  - JDK-8305400: ISO 4217 Amendment 175 Update\n  - JDK-8305528: [11u] Backport of JDK-8259530 breaks build with\n    JDK10 bootstrap VM\n  - JDK-8305682: Update the javadoc in the Character class to\n    state support for GB 18030-2022 Implementation Level 2\n  - JDK-8305711: Arm: C2 always enters slowpath for monitorexit\n  - JDK-8305721: add `make compile-commands` artifacts to\n    .gitignore\n  - JDK-8305975: Add TWCA Global Root CA\n  - JDK-8306543: GHA: MSVC installation is failing\n  - JDK-8306658: GHA: MSVC installation could be optional since\n    it might already be pre-installed\n  - JDK-8306664: GHA: Update MSVC version to latest stepping\n  - JDK-8306768: CodeCache Analytics reports wrong threshold\n  - JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep\n  - JDK-8307134: Add GTS root CAs\n  - JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest\n    fails after backport of JDK-8303861\n  - JDK-8308006: Missing NMT memory tagging in CMS\n  - JDK-8308884: [17u/11u] Backout JDK-8297951\n  - JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java\n    fails intermittently\n  - JDK-8311465: [11u] Remove designator\n    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20\n","modified":"2026-02-04T03:40:00.794439Z","published":"2023-08-11T10:27:51Z","related":["CVE-2023-22006","CVE-2023-22036","CVE-2023-22041","CVE-2023-22044","CVE-2023-22045","CVE-2023-22049","CVE-2023-25193"],"upstream":["CVE-2023-22006","CVE-2023-22036","CVE-2023-22041","CVE-2023-22044","CVE-2023-22045","CVE-2023-22049","CVE-2023-25193"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233287-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207922"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213473"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213474"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213475"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213479"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213481"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213482"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22006"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22036"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22041"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22044"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22045"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22049"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-25193"}],"affected":[{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.20.0-150000.3.99.1","java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-javadoc":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-javadoc":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.20.0-150000.3.99.1","java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.20.0-150000.3.99.1","java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.20.0-150000.3.99.1","java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1","java-11-openjdk-demo":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Manager Proxy 4.2","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Manager%20Proxy%204.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1","java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Manager Server 4.2","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Manager%20Server%204.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Enterprise Storage 7.1","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Enterprise%20Storage%207.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk-javadoc":"11.0.20.0-150000.3.99.1","java-11-openjdk-jmods":"11.0.20.0-150000.3.99.1","java-11-openjdk-src":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1","java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"openSUSE:Leap 15.5","purl":"pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Leap%2015.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.20.0-150000.3.99.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.20.0-150000.3.99.1","java-11-openjdk-devel":"11.0.20.0-150000.3.99.1","java-11-openjdk-headless":"11.0.20.0-150000.3.99.1","java-11-openjdk-javadoc":"11.0.20.0-150000.3.99.1","java-11-openjdk-jmods":"11.0.20.0-150000.3.99.1","java-11-openjdk-src":"11.0.20.0-150000.3.99.1","java-11-openjdk":"11.0.20.0-150000.3.99.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3287-1.json"}}],"schema_version":"1.7.3"}