critical
SUSE-SU-2021:14634-1
Security update for java-1_7_1-ibm
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 80 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. * CVE-2020-14803: Unauthenticated attacker with network access via multiple protocols allows to compromise Java SE.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 11.4 | java-1_7_1-ibm, java-1_7_1-ibm-alsa, java-1_7_1-ibm-devel and 2 more | 1.7.1_sr4.80-26.65.1 |
Show all 5 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 11.4 | java-1_7_1-ibm | 1.7.1_sr4.80-26.65.1 |
| SUSE Linux Enterprise 11.4 | java-1_7_1-ibm-alsa | 1.7.1_sr4.80-26.65.1 |
| SUSE Linux Enterprise 11.4 | java-1_7_1-ibm-devel | 1.7.1_sr4.80-26.65.1 |
| SUSE Linux Enterprise 11.4 | java-1_7_1-ibm-jdbc | 1.7.1_sr4.80-26.65.1 |
| SUSE Linux Enterprise 11.4 | java-1_7_1-ibm-plugin | 1.7.1_sr4.80-26.65.1 |
References
- https://bugzilla.suse.com/1181239
- https://bugzilla.suse.com/1182186
- https://lists.suse.com/pipermail/sle-security-updates/2021-February/008347.html
- https://www.suse.com/security/cve/CVE-2020-14803/
- https://www.suse.com/security/cve/CVE-2020-27221/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-202114634-1/