The java-11-openjdk is vulnerable to denial of service (DoS). It is possible due to a slow conversion of BigDecimal to long.
lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html
lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html
www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
access.redhat.com/errata/RHBA-2019:0959
access.redhat.com/errata/RHSA-2019:0778
access.redhat.com/errata/RHSA-2019:1146
access.redhat.com/errata/RHSA-2019:1163
access.redhat.com/errata/RHSA-2019:1164
access.redhat.com/errata/RHSA-2019:1165
access.redhat.com/errata/RHSA-2019:1166
access.redhat.com/errata/RHSA-2019:1238
access.redhat.com/errata/RHSA-2019:1325
access.redhat.com/errata/RHSA-2019:1518
access.redhat.com/security/updates/classification/#moderate
kc.mcafee.com/corporate/index?page=content&id=SB10285
lists.debian.org/debian-lts-announce/2019/05/msg00011.html
seclists.org/bugtraq/2019/May/75
security.gentoo.org/glsa/201908-10
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us
usn.ubuntu.com/3975-1/
www.debian.org/security/2019/dsa-4453