<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for java-1_7_0-openjdk</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2021:3797-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2021-11-24T15:48:22Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-11-24T15:48:22Z</InitialReleaseDate>
    <CurrentReleaseDate>2021-11-24T15:48:22Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for java-1_7_0-openjdk</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for java-1_7_0-openjdk fixes the following issues:


Update to OpenJDK 7u321 (October 2021 CPU):

- CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901).
- CVE-2021-35556: Fixed excessive memory allocation in RTFParser (bsc#1191910).
- CVE-2021-35559: Fixed excessive memory allocation in RTFReader (bsc#1191911).
- CVE-2021-35561: Fixed excessive memory allocation in HashMap and HashSet (bsc#1191912).
- CVE-2021-35564: Fixed certificates with end dates too far in the future can corrupt keystore (bsc#1191913).
- CVE-2021-35565: Fixed loop in HttpsServer triggered during TLS session close (bsc#1191909).
- CVE-2021-35586: Fixed excessive memory allocation in BMPImageReader (bsc#1191914).
- CVE-2021-35588: Fixed incomplete validation of inner class references in ClassFileParser (bsc#1191905)
- CVE-2021-35603: Fixed non-constant comparison during TLS handshakes (bsc#1191906).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">HPE-Helion-OpenStack-8-2021-3797,SUSE-2021-3797,SUSE-OpenStack-Cloud-8-2021-3797,SUSE-OpenStack-Cloud-9-2021-3797,SUSE-OpenStack-Cloud-Crowbar-8-2021-3797,SUSE-OpenStack-Cloud-Crowbar-9-2021-3797,SUSE-SLE-SAP-12-SP3-2021-3797,SUSE-SLE-SAP-12-SP4-2021-3797,SUSE-SLE-SERVER-12-SP2-BCL-2021-3797,SUSE-SLE-SERVER-12-SP3-2021-3797,SUSE-SLE-SERVER-12-SP3-BCL-2021-3797,SUSE-SLE-SERVER-12-SP4-LTSS-2021-3797,SUSE-SLE-SERVER-12-SP5-2021-3797</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      <Description>Link for SUSE-SU-2021:3797-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2021-November/009773.html</URL>
      <Description>E-Mail link for SUSE-SU-2021:3797-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191901</URL>
      <Description>SUSE Bug 1191901</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191905</URL>
      <Description>SUSE Bug 1191905</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191906</URL>
      <Description>SUSE Bug 1191906</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191909</URL>
      <Description>SUSE Bug 1191909</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191910</URL>
      <Description>SUSE Bug 1191910</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191911</URL>
      <Description>SUSE Bug 1191911</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191912</URL>
      <Description>SUSE Bug 1191912</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191913</URL>
      <Description>SUSE Bug 1191913</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191914</URL>
      <Description>SUSE Bug 1191914</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35550/</URL>
      <Description>SUSE CVE CVE-2021-35550 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35556/</URL>
      <Description>SUSE CVE CVE-2021-35556 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35559/</URL>
      <Description>SUSE CVE CVE-2021-35559 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35561/</URL>
      <Description>SUSE CVE CVE-2021-35561 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35564/</URL>
      <Description>SUSE CVE CVE-2021-35564 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35565/</URL>
      <Description>SUSE CVE CVE-2021-35565 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35586/</URL>
      <Description>SUSE CVE CVE-2021-35586 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35588/</URL>
      <Description>SUSE CVE CVE-2021-35588 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-35603/</URL>
      <Description>SUSE CVE CVE-2021-35603 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="HPE Helion OpenStack 8">
      <Branch Type="Product Name" Name="HPE Helion OpenStack 8">
        <FullProductName ProductID="HPE Helion OpenStack 8" CPE="cpe:/o:suse:hpe-helion-openstack:8">HPE Helion OpenStack 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP2-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP2-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL" CPE="cpe:/o:suse:sles-bcl:12:sp2">SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL" CPE="cpe:/o:suse:sles-bcl:12:sp3">SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS" CPE="cpe:/o:suse:sles-ltss:12:sp3">SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP4-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS" CPE="cpe:/o:suse:sles-ltss:12:sp4">SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5" CPE="cpe:/o:suse:sles:12:sp5">SUSE Linux Enterprise Server 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3" CPE="cpe:/o:suse:sles_sap:12:sp3">SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4" CPE="cpe:/o:suse:sles_sap:12:sp4">SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5" CPE="cpe:/o:suse:sles_sap:12:sp5">SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 8">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 8">
        <FullProductName ProductID="SUSE OpenStack Cloud 8" CPE="cpe:/o:suse:suse-openstack-cloud:8">SUSE OpenStack Cloud 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 9">
        <FullProductName ProductID="SUSE OpenStack Cloud 9" CPE="cpe:/o:suse:suse-openstack-cloud:9">SUSE OpenStack Cloud 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud Crowbar 8">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud Crowbar 8">
        <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8" CPE="cpe:/o:suse:suse-openstack-cloud-crowbar:8">SUSE OpenStack Cloud Crowbar 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud Crowbar 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud Crowbar 9">
        <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9" CPE="cpe:/o:suse:suse-openstack-cloud-crowbar:9">SUSE OpenStack Cloud Crowbar 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-accessibility-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-accessibility-1.7.0.321-43.53.2">java-1_7_0-openjdk-accessibility-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-bootstrap-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-bootstrap-1.7.0.321-43.53.2">java-1_7_0-openjdk-bootstrap-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-bootstrap-devel-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-bootstrap-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-bootstrap-devel-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-bootstrap-headless-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-bootstrap-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-bootstrap-headless-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-javadoc-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-javadoc-1.7.0.321-43.53.2">java-1_7_0-openjdk-javadoc-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_7_0-openjdk-src-1.7.0.321-43.53.2">
      <FullProductName ProductID="java-1_7_0-openjdk-src-1.7.0.321-43.53.2">java-1_7_0-openjdk-src-1.7.0.321-43.53.2</FullProductName>
    </Branch>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2">java-1_7_0-openjdk-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-demo-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2">java-1_7_0-openjdk-demo-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-devel-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2">java-1_7_0-openjdk-devel-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_7_0-openjdk-headless-1.7.0.321-43.53.2" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2">java-1_7_0-openjdk-headless-1.7.0.321-43.53.2 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).</Note>
    </Notes>
    <CVE>CVE-2021-35550</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>7.1</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:C/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.9</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35550.html</URL>
        <Description>CVE-2021-35550</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191901</URL>
        <Description>SUSE Bug 1191901</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193314</URL>
        <Description>SUSE Bug 1193314</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).</Note>
    </Notes>
    <CVE>CVE-2021-35556</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35556.html</URL>
        <Description>CVE-2021-35556</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191910</URL>
        <Description>SUSE Bug 1191910</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).</Note>
    </Notes>
    <CVE>CVE-2021-35559</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35559.html</URL>
        <Description>CVE-2021-35559</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191911</URL>
        <Description>SUSE Bug 1191911</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).</Note>
    </Notes>
    <CVE>CVE-2021-35561</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35561.html</URL>
        <Description>CVE-2021-35561</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191912</URL>
        <Description>SUSE Bug 1191912</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).</Note>
    </Notes>
    <CVE>CVE-2021-35564</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35564.html</URL>
        <Description>CVE-2021-35564</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191913</URL>
        <Description>SUSE Bug 1191913</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).</Note>
    </Notes>
    <CVE>CVE-2021-35565</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35565.html</URL>
        <Description>CVE-2021-35565</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191909</URL>
        <Description>SUSE Bug 1191909</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).</Note>
    </Notes>
    <CVE>CVE-2021-35586</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35586.html</URL>
        <Description>CVE-2021-35586</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191914</URL>
        <Description>SUSE Bug 1191914</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1194928</URL>
        <Description>SUSE Bug 1194928</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u311, 8u301; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).</Note>
    </Notes>
    <CVE>CVE-2021-35588</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.6</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>3.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35588.html</URL>
        <Description>CVE-2021-35588</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191905</URL>
        <Description>SUSE Bug 1191905</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).</Note>
    </Notes>
    <CVE>CVE-2021-35603</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>HPE Helion OpenStack 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-demo-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-devel-1.7.0.321-43.53.2</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:java-1_7_0-openjdk-headless-1.7.0.321-43.53.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>3.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20213797-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-35603.html</URL>
        <Description>CVE-2021-35603</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191906</URL>
        <Description>SUSE Bug 1191906</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
