Red Hat Security Advisory

RHSA-2016:1039

java-1.8.0-ibm security update

Released 2016-05-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6, java-1.8.0-ibm-demo-1:1.8.0.3.0-1jpp.1.el6, java-1.8.0-ibm-devel-1:1.8.0.3.0-1jpp.1.el6 +3
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6, java-1.8.0-ibm-demo-1:1.8.0.3.0-1jpp.1.el6, java-1.8.0-ibm-devel-1:1.8.0.3.0-1jpp.1.el6 +1
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6, java-1.8.0-ibm-demo-1:1.8.0.3.0-1jpp.1.el6, java-1.8.0-ibm-devel-1:1.8.0.3.0-1jpp.1.el6 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6, java-1.8.0-ibm-demo-1:1.8.0.3.0-1jpp.1.el6, java-1.8.0-ibm-devel-1:1.8.0.3.0-1jpp.1.el6 +3

Fixes 10 records

TI-2016-02888 CVE-2016-3427 · GHSA-php4-mj74-f79r

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77…

CRITICAL 100KEV

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.92334 Published 2016-04-21 Fixed CWE-284

TI-2016-02903 CVE-2016-3443 · GHSA-wf68-w3c3-xjhm

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.05479 Published 2016-04-21 Fixed

TI-2016-00616 CVE-2016-0687 · GHSA-xvgm-5834-vp34

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded…

MEDIUM 50

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.0472 Published 2016-04-21 Fixed

TI-2016-00615 CVE-2016-0686 · GHSA-99gg-jjjf-pjc8

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded…

MEDIUM 50

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.0472 Published 2016-04-21 Fixed

TI-2016-02909 CVE-2016-3449 · GHSA-v7xg-gp2r-hx5f

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers…

MEDIUM 45

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.04009 Published 2016-04-21 Fixed

TI-2016-00334 CVE-2016-0376 · GHSA-j9hc-g284-326f

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6…

MEDIUM 44

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 be…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.05695 Published 2016-06-03 Fixed

TI-2016-00322 CVE-2016-0363 · GHSA-p824-48mj-5qcc

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before…

MEDIUM 42

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.03983 Published 2016-06-03 Fixed CWE-20

TI-2016-00232 CVE-2016-0264 · GHSA-3p6j-59jx-xr88

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6…

LOW 32

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8…

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.03925 Published 2016-05-24 Fixed CWE-119

TI-2016-02883 CVE-2016-3422 · GHSA-c95q-vf7r-wm72

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers…

LOW 25

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.02802 Published 2016-04-21 Fixed

TI-2016-02887 CVE-2016-3426 · GHSA-3mj4-w4vq-39pp

Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote…

LOW 20

Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE.

CVSS 3.0LOW 3.1 Network No auth User interaction EPSS 0.02795 Published 2016-04-21 Fixed