Red Hat Security AdvisoryRHSA-2017:0180
java-1.8.0-openjdk security update
Released 2017-01-20 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el7_3 +11
- Red Hat Enterprise Linux ComputeNode (v. 7) java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el7_3 +11
- Red Hat Enterprise Linux Desktop (v. 6) java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-demo-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-demo-debug-1:1.8.0.121-0.b13.el6_8 +7
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-devel-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-demo-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-demo-debug-1:1.8.0.121-0.b13.el6_8 +6
- Red Hat Enterprise Linux Server (v. 6) java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-devel-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el6_8
- Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-devel-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el7_3
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-demo-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-demo-debug-1:1.8.0.121-0.b13.el6_8 +6
- Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el7_3 +10
- Red Hat Enterprise Linux Workstation (v. 6) java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-devel-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el6_8
- Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-devel-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-demo-1:1.8.0.121-0.b13.el6_8, java-1.8.0-openjdk-demo-debug-1:1.8.0.121-0.b13.el6_8 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.121-0.b13.el7_3, java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el7_3 +10
Fixes 11 records
Priority HIGH 66
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI).
CVSS 3.0CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.32839 · Published 2017-01-27 · Fixed CWE-20
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02463 · Published 2017-01-27 · Fixed
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02997 · Published 2017-01-27 · Fixed
Priority MEDIUM 45
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D).
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03868 · Published 2017-01-27 · Fixed
Priority MEDIUM 45
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03167 · Published 2017-01-27 · Fixed
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03533 · Published 2017-01-27 · Fixed
Priority LOW 35
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02729 · Published 2017-01-27 · Fixed
Priority LOW 34
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02972 · Published 2017-01-27 · Fixed
Priority LOW 30
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS).
CVSS 3.0MEDIUM 5.8· Network · Low privileges · User interaction · EPSS 0.01933 · Published 2017-01-27 · Fixed
Priority LOW 25
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.02499 · Published 2017-01-27 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.02166 · Published 2017-01-27 · Fixed CWE-200