Red Hat Security AdvisoryRHSA-2016:2658
java-1.7.0-openjdk security update
Released 2016-11-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11, java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11.i386, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el5_11 +7
- Red Hat Enterprise Linux Client (v. 7) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-headless-1:1.7.0.121-2.6.8.0.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.0.el7_3 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-headless-1:1.7.0.121-2.6.8.0.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.0.el7_3 +2
- Red Hat Enterprise Linux Desktop (v. 5 client) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11, java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11.i386, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el5_11 +7
- Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.1.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-src-1:1.7.0.121-2.6.8.1.el6_8
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.1.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-src-1:1.7.0.121-2.6.8.1.el6_8
- Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.1.el6_8
- Red Hat Enterprise Linux Server (v. 7) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-headless-1:1.7.0.121-2.6.8.0.el7_3
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-src-1:1.7.0.121-2.6.8.1.el6_8
- Red Hat Enterprise Linux Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.0.el7_3 +1
- Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.1.el6_8
- Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-devel-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-headless-1:1.7.0.121-2.6.8.0.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.1.el6_8, java-1.7.0-openjdk-src-1:1.7.0.121-2.6.8.1.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-demo-1:1.7.0.121-2.6.8.0.el7_3, java-1.7.0-openjdk-javadoc-1:1.7.0.121-2.6.8.0.el7_3 +1
Fixes 6 records
Priority MEDIUM 51
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulne…
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.05225 · Published 2016-10-25 · Fixed CWE-284
Priority MEDIUM 44
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulne…
CVSS 3.0HIGH 8.3· Network · No auth · User interaction · EPSS 0.03255 · Published 2016-10-25 · Fixed CWE-264
Priority LOW 36
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bo…
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.02762 · Published 2017-02-03 · Partial fix CWE-125
Priority LOW 33
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03937 · Published 2016-10-25 · Fixed CWE-200
Priority LOW 26
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.03097 · Published 2016-10-25 · Fixed
Priority LOW 20
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.
CVSS 3.0LOW 3.1· Network · No auth · User interaction · EPSS 0.02793 · Published 2016-10-25 · Fixed
THREATIST.IORead the docs