Red Hat Security Advisory

RHSA-2016:2138

java-1.7.0-ibm security update

Released 2016-11-02 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11, java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11.i386, java-1.7.0-ibm-demo-1:1.7.0.9.60-1jpp.1.el5_11 +9
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11, java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11.i386, java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11.ppc +15

Fixes 5 records

TI-2016-04822 CVE-2016-5556 · GHSA-h296-rv9c-3fhw

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.04885 Published 2016-10-25 Fixed CWE-284

TI-2016-04839 CVE-2016-5573 · GHSA-xpxv-6ccf-795w

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded…

MEDIUM 44

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulne…

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.03255 Published 2016-10-25 Fixed CWE-264

TI-2016-04863 CVE-2016-5597 · GHSA-6q5r-8qc5-j49x

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded…

LOW 33

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.03937 Published 2016-10-25 Fixed CWE-200

TI-2016-04820 CVE-2016-5554 · GHSA-6cr3-4q7p-67qc

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded…

LOW 26

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.03097 Published 2016-10-25 Fixed

TI-2016-04809 CVE-2016-5542 · GHSA-gjxp-f524-fgrv

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded…

LOW 20

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.

CVSS 3.0LOW 3.1 Network No auth User interaction EPSS 0.02793 Published 2016-10-25 Fixed