{"affected":[{"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.9.0-lp152.2.6.2","java-11-openjdk-accessibility":"11.0.9.0-lp152.2.6.2","java-11-openjdk-demo":"11.0.9.0-lp152.2.6.2","java-11-openjdk-devel":"11.0.9.0-lp152.2.6.2","java-11-openjdk-headless":"11.0.9.0-lp152.2.6.2","java-11-openjdk-javadoc":"11.0.9.0-lp152.2.6.2","java-11-openjdk-jmods":"11.0.9.0-lp152.2.6.2","java-11-openjdk-src":"11.0.9.0-lp152.2.6.2"}]},"package":{"ecosystem":"openSUSE:Leap 15.2","name":"java-11-openjdk","purl":"pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Leap%2015.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"11.0.9.0-lp152.2.6.2"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for java-11-openjdk fixes the following issues:\n\n- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,\n  bsc#1177943)\n  * New features\n    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector\n  * Security fixes\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8240124: Better VM Interning\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Other changes\n    + JDK-6532025: GIF reader throws misleading exception with\n      truncated images\n    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/\n      /PDialogTest.java needs update by removing an infinite loop\n    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/\n      /Test8017492.java fails\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed\n    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/\n      /CloseServerSocket.java fails intermittently with Address\n      already in use\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8172404: Tools should warn if weak algorithms are used\n      before restricting them\n    + JDK-8193367: Annotated type variable bounds crash javac\n    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java\n      fails intermittently: Connection reset\n    + JDK-8203026: java.rmi.NoSuchObjectException: no such object\n      in table\n    + JDK-8203281: [Windows] JComboBox change in ui when\n      editor.setBorder() is called\n    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to\n      resolve_wk_klass\n    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and\n      JdbExprTest.sh fail due to timeout\n    + JDK-8203928: [Test] Convert non-JDB scaffolding\n      serviceability shell script tests to java\n    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak\n    + JDK-8204994: SA might fail to attach to process with 'Windbg\n      Error: WaitForEvent failed'\n    + JDK-8205534: Remove SymbolTable dependency from\n      serviceability agent\n    + JDK-8206309: Tier1 SA tests fail\n    + JDK-8208281: java/nio/channels/\n      /AsynchronousSocketChannel/Basic.java timed out\n    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step1\n    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh\n      is incorrect\n    + JDK-8209342: Problemlist SA tests on Solaris due to Error\n      attaching to process: Can't create thread_db agent!\n    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java\n      should be marked as headful\n    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with\n      timeout\n    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step2\n    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with\n      ZGC\n    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java\n    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/\n      /ap10t001/TestDescription.java failed with ObjectFree:\n      GetCurrentThreadCpuTimerInfo returned unexpected error code\n    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step3\n    + JDK-8210527: JShell: NullPointerException in\n      jdk.jshell.Eval.translateExceptionStack\n    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related\n      tests\n    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails\n      with waitForPrompt timed out after 60 seconds\n    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should\n      clarify which output is the pending reply after a timeout\n    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step4\n    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java\n      fails to find ThreadLocalObject\n    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh\n      test\n    + JDK-8211694: JShell: Redeclared variable should be reset\n    + JDK-8212200: assert when shared java.lang.Object is redefined\n      by JVMTI agent\n    + JDK-8212629: [TEST] wrong breakpoint in\n      test/jdk/com/sun/jdi/DeferredStepTest\n    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)\n      - unexpected. lastLine=52, minLine=52, maxLine=55\n    + JDK-8212807: tools/jar/multiRelease/Basic.java times out\n    + JDK-8213182: Minimal VM build failure after JDK-8212200\n      (assert when shared java.lang.Object is redefined by JVMTI\n      agent)\n    + JDK-8213214: Set -Djava.io.tmpdir= when running tests\n    + JDK-8213275: ReplaceCriticalClasses.java fails with\n      jdk.internal.vm.PostVMInitHook not found\n    + JDK-8213574: Deadlock in string table expansion when dumping\n      lots of CDS classes\n    + JDK-8213703: LambdaConversionException: Invalid receiver type\n      not a subtype of implementation type interface\n    + JDK-8214074: Ghash optimization using AVX instructions\n    + JDK-8214491: Upgrade to JLine 3.9.0\n    + JDK-8214797: TestJmapCoreMetaspace.java timed out\n    + JDK-8215243: JShell tests failing intermitently with\n      'Problem cleaning up the following threads:'\n    + JDK-8215244: jdk/jshell/ToolBasicTest.java\n      testHistoryReference failed\n    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash\n      optimization using AVX instructions)\n    + JDK-8215438: jshell tool: Ctrl-D causes EOF\n    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on\n      Windows\n    + JDK-8216974: HttpConnection not returned to the pool after\n      204 response\n    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not\n      reflected correctly during run time\n    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is\n      too small on new Skylake CPUs\n    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs\n      instead of aliased B&W glyphs\n    + JDK-8221658: aarch64: add necessary predicate for ubfx\n      patterns\n    + JDK-8221759: Crash when completing 'java.io.File.path'\n    + JDK-8221918: runtime/SharedArchiveFile/serviceability/\n      /ReplaceCriticalClasses.java fails: Shared archive not found\n    + JDK-8222074: Enhance auto vectorization for x86\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely\n      on hostname command\n    + JDK-8223688: JShell: crash on the instantiation of raw\n      anonymous class\n    + JDK-8223777: In posix_spawn mode, failing to exec()\n      jspawnhelper does not result in an error\n    + JDK-8223940: Private key not supported by chosen signature\n      algorithm\n    + JDK-8224184: jshell got IOException at exiting with AIX\n    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in\n      test_mulc\n    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws\n      NullPointerException\n    + JDK-8225625: AES Electronic Codebook (ECB) encryption and\n      decryption optimization using AVX512 + VAES instructions\n    + JDK-8226536: Catch OOM from deopt that fails rematerializing\n      objects\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented & ambiguous\n    + JDK-8227059: sun/security/tools/keytool/\n      /DefaultSignatureAlgorithm.java timed out\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java\n      fails due to 'exitValue = 6'\n    + JDK-8228448: Jconsole can't connect to itself\n    + JDK-8228967: Trust/Key store and SSL context utilities for\n      tests\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8229815: Upgrade Jline to 3.12.1\n    + JDK-8230000: some httpclients testng tests run zero test\n    + JDK-8230002: javax/xml/jaxp/unittest/transform/\n      /SecureProcessingTest.java runs zero test\n    + JDK-8230010: Remove jdk8037819/BasicTest1.java\n    + JDK-8230094: CCE in createXMLEventWriter(Result) over an\n      arbitrary XMLStreamWriter\n    + JDK-8230402: Allocation of compile task fails with assert:\n      'Leaking compilation tasks?'\n    + JDK-8230767: FlightRecorderListener returns null recording\n    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to\n      test/jdk/java/util/zip/EntryCount64k.java\n    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()\n      can be quicker for self thread\n    + JDK-8231586: enlarge encoding space for OopMapValue offsets\n    + JDK-8231953: Wrong assumption in assertion in\n      oop::register_oop\n    + JDK-8231968: getCurrentThreadAllocatedBytes default\n      implementation s/b getThreadAllocatedBytes\n    + JDK-8232083: Minimal VM is broken after JDK-8231586\n    + JDK-8232161: Align some one-way conversion in MS950 charset\n      with Windows\n    + JDK-8232855: jshell missing word in /help help\n    + JDK-8233027: OopMapSet::all_do does oms.next() twice during\n      iteration\n    + JDK-8233228: Disable weak named curves by default in TLS,\n      CertPath, and Signed JAR\n    + JDK-8233386: Initialize NULL fields for unused decorations\n    + JDK-8233452: java.math.BigDecimal.sqrt() with\n      RoundingMode.FLOOR results in incorrect result\n    + JDK-8233686: XML transformer uses excessive amount of memory\n    + JDK-8233741: AES Countermode (AES-CTR) optimization using\n      AVX512 + VAES instructions\n    + JDK-8233829: javac cannot find non-ASCII module name under\n      non-UTF8 environment\n    + JDK-8233958: Memory retention due to HttpsURLConnection\n      finalizer that serves no purpose\n    + JDK-8234011: (zipfs) Memory leak in\n      ZipFileSystem.releaseDeflater()\n    + JDK-8234058: runtime/CompressedOops/\n      /CompressedClassPointers.java fails with 'Narrow klass base:\n      0x0000000000000000' missing from stdout/stderr\n    + JDK-8234149: Several regression tests do not dispose Frame at\n      end\n    + JDK-8234347: 'Turkey' meta time zone does not generate\n      composed localized names\n    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/\n      /bug6980209.java fails in linux nightly\n    + JDK-8234535: Cross compilation fails due to missing CFLAGS\n      for the BUILD_CC\n    + JDK-8234541: C1 emits an empty message when it inlines\n      successfully\n    + JDK-8234687: change javap reporting on unknown attributes\n    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK\n      11\n    + JDK-8236548: Localized time zone name inconsistency between\n      English and other locales\n    + JDK-8236617: jtreg test containers/docker/\n      /TestMemoryAwareness.java fails after 8226575\n    + JDK-8237182: Update copyright header for shenandoah and\n      epsilon files\n    + JDK-8237888: security/infra/java/security/cert/\n      /CertPathValidator/certification/LuxTrustCA.java fails when\n      checking validity interval\n    + JDK-8237977: Further update\n      javax/net/ssl/compatibility/Compatibility.java\n    + JDK-8238270: java.net HTTP/2 client does not decrease stream\n      count when receives 204 response\n    + JDK-8238284: [macos] Zero VM build fails due to an obvious\n      typo\n    + JDK-8238380: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link\n      errors with GCC10\n    + JDK-8238448: RSASSA-PSS signature verification fail when\n      using certain odd key sizes\n    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits\n      with non-zero code\n    + JDK-8239083: C1 assert(known_holder == NULL ||\n      (known_holder->is_instance_klass() &&\n      (!known_holder->is_interface() ||\n      ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())),\n      'should be non-static concrete method');\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8240169: javadoc fails to link to non-modular api docs\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8240360: NativeLibraryEvent has wrong library name on\n      Linux\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + JDK-8241065: Shenandoah: remove leftover code after\n      JDK-8231086\n    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is\n      failing on 32bit Windows\n    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:\n      java.lang.NullPointerException\n    + JDK-8241138: http.nonProxyHosts=* causes\n      StringIndexOutOfBoundsException in DefaultProxySelector\n    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark\n    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java\n      fails with OOME\n    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8242184: CRL generation error with RSASSA-PSS\n    + JDK-8242283: Can't start JVM when java home path includes\n      non-ASCII character\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8243029: Rewrite javax/net/ssl/compatibility/\n      /Compatibility.java with a flexible interop test framework\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8243389: enhance os::pd_print_cpu_info on linux\n    + JDK-8243453: java --describe-module failed with non-ASCII\n      module name under non-UTF8 environment\n    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on\n      HiDPI screens (Windows)\n    + JDK-8244087: 2020-04-24 public suffix list update\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8244164: AArch64: jaotc generates incorrect code for\n      compressed OOPs with non-zero heap base\n    + JDK-8244196: adjust output in os_linux\n    + JDK-8244225: stringop-overflow warning on strncpy call from\n      compile_the_world_in\n    + JDK-8244287: JFR: Methods samples have line number 0\n    + JDK-8244703: 'platform encoding not initialized' exceptions\n      with debugger, JNI\n    + JDK-8244719: CTW: C2 compilation fails with\n      'assert(!VerifyHashTableKeys || _hash_lock == 0) failed:\n      remove node from hash table before modifying it'\n    + JDK-8244729: Shenandoah: remove resolve paths from\n      SBSA::generate_shenandoah_lrb\n    + JDK-8244763: Update --release 8 symbol information after JSR\n      337 MR3\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8245151: jarsigner should not raise duplicate warnings on\n      verification\n    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9\n    + JDK-8245714: 'Bad graph detected in build_loop_late' when\n      loads are pinned on loop limit check uncommon branch\n    + JDK-8245801: StressRecompilation triggers assert 'redundunt\n      OSR recompilation detected. memory leak in CodeCache!'\n    + JDK-8245832: JDK build make-static-libs should build all JDK\n      libraries\n    + JDK-8245880: Shenandoah: check class unloading flag early in\n      concurrent code root scan\n    + JDK-8245981: Upgrade to jQuery 3.5.1\n    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801\n    + JDK-8246094: [macos] Sound Recording and playback is not\n      working\n    + JDK-8246153: TestEliminateArrayCopy fails with\n      -XX:+StressReflectiveCode\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest\n      fails with AssertionError\n    + JDK-8246203: Segmentation fault in verification due to stack\n      overflow with -XX:+VerifyIterativeGVN\n    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves\n    + JDK-8246453: TestClone crashes with 'all collected exceptions\n      must come from the same place'\n    + JDK-8247246: Add explicit ResolvedJavaType.link and expose\n      presence of default methods\n    + JDK-8247350: [aarch64] assert(false) failed: wrong size of\n      mach node\n    + JDK-8247502: PhaseStringOpts crashes while optimising\n      effectively dead code\n    + JDK-8247615: Initialize the bytes left for the heap sampler\n    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV\n      in SBC2Support::pin_and_expand\n    + JDK-8247874: Replacement in VersionProps.java.template not\n      working when --with-vendor-bug-url contains '&'\n    + JDK-8247979: aarch64: missing side effect of killing flags\n      for clearArray_reg_reg\n    + JDK-8248214: Add paddings for TaskQueueSuper to reduce\n      false-sharing cache contention\n    + JDK-8248219: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n    + JDK-8248348: Regression caused by the update to BCEL 6.0\n    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to\n      jtreg 5.1\n    + JDK-8248495: [macos] zerovm is broken due to libffi headers\n      location\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on\n      Windows\n    + JDK-8249159: Downport test rework for SSLSocketTemplate from\n      8224650\n    + JDK-8249215: JFrame::setVisible crashed with\n      -Dfile.encoding=UTF-8 on Japanese Windows.\n    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is\n      not highlighted in GTKLookAndFeel\n    + JDK-8249255: Build fails if source code in cygwin home dir\n    + JDK-8249277: TestVerifyIterativeGVN.java is failing with\n      timeout in OpenJDK 11\n    + JDK-8249278: Revert JDK-8226253 which breaks the spec of\n      AccessibleState.SHOWING for JList\n    + JDK-8249560: Shenandoah: Fix racy GC request handling\n    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle\n    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should\n      account for corner cases\n    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when\n      requesting TGS Kerberos tickets\n    + JDK-8250609: C2 crash in IfNode::fold_compares\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8250755: Better cleanup for\n      jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java\n    + JDK-8250787: Provider.put no longer registering aliases in\n      FIPS env\n    + JDK-8250826: jhsdb does not work with coredump which comes\n      from Substrate VM\n    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's\n      dead count before/after parallel walk\n    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check\n      the bounds\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java\n      test failure\n    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with\n      I-U\n    + JDK-8251469: Better cleanup for\n      test/jdk/javax/imageio/SetOutput.java\n    + JDK-8251487: Shenandoah: missing detail timing tracking for\n      final mark cleaning phase\n    + JDK-8252120: compiler/oracle/TestCompileCommand.java\n      misspells 'occured'\n    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary\n      compatibility\n    + JDK-8252258: [11u] JDK-8242154 changes the default vendor\n    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after\n      downport of 8234011\n    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)\n      in JDK 11\n    + JDK-8253283: [11u] Test build/translations/\n      /VerifyTranslations.java failing after JDK-8252258\n    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several\n      crashes\n    + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*,\n      bool)' introduced in jdk 11.0.9\n\nThis update was imported from the SUSE:SLE-15:Update update project.","id":"openSUSE-SU-2020:1994-1","modified":"2020-11-21T11:23:12Z","published":"2020-11-21T11:23:12Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177943"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14779"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14781"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14782"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14792"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14796"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14797"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14798"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14803"}],"related":["CVE-2020-14779","CVE-2020-14781","CVE-2020-14782","CVE-2020-14792","CVE-2020-14796","CVE-2020-14797","CVE-2020-14798","CVE-2020-14803"],"summary":"Security update for java-11-openjdk","upstream":["CVE-2020-14779","CVE-2020-14781","CVE-2020-14782","CVE-2020-14792","CVE-2020-14796","CVE-2020-14797","CVE-2020-14798","CVE-2020-14803"]}