Red Hat Security Advisory

RHSA-2017:0263

java-1.8.0-ibm security update

Released 2017-02-09 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el7 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el7 +1
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8, java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el6_8, java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el6_8 +3
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8, java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el6_8, java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el6_8 +1
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8, java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el6_8, java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el6_8 +3
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7, java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7.ppc, java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el7 +5
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8, java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el6_8, java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el6_8 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el7 +3

Fixes 13 records

TI-2017-02441 CVE-2017-3241 · GHSA-j64j-5jrj-hggj

Improper input validation in Oracle Java SE

HIGH 66

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.32839 Published 2017-01-27 Fixed CWE-20

TI-2017-02489 CVE-2017-3289 · GHSA-9wpw-6vg5-7w9g

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.02463 Published 2017-01-27 Fixed

TI-2017-02472 CVE-2017-3272 · GHSA-c84v-7x2r-5mvq

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.02997 Published 2017-01-27 Fixed

TI-2017-02453 CVE-2017-3253 · GHSA-4cjw-q36g-5wch

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03868 Published 2017-01-27 Fixed

TI-2016-04813 CVE-2016-5546 · GHSA-rrgr-g95w-822m

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03167 Published 2017-01-27 Fixed

TI-2016-04814 CVE-2016-5547 · GHSA-xr6v-8g67-wwxp

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 36

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.03533 Published 2017-01-27 Fixed

TI-2016-04818 CVE-2016-5552 · GHSA-c62w-9mvr-73gf

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 35

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02729 Published 2017-01-27 Fixed

TI-2016-04816 CVE-2016-5549 · GHSA-4p8w-9rpg-4mhm

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 35

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.03144 Published 2017-01-27 Fixed

TI-2016-04815 CVE-2016-5548 · GHSA-m9ww-jj36-frjp

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 34

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02972 Published 2017-01-27 Fixed

TI-2017-02452 CVE-2017-3252 · GHSA-942v-9xcr-5cqh

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 30

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS).

CVSS 3.0MEDIUM 5.8 Network Low privileges User interaction EPSS 0.01933 Published 2017-01-27 Fixed

TI-2017-02461 CVE-2017-3261 · GHSA-4cvq-qgfc-6fqx

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 25

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.02499 Published 2017-01-27 Fixed

TI-2017-02431 CVE-2017-3231 · GHSA-25f7-696r-m32w

Information disclosure in Oracle Java SE

LOW 24

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.02166 Published 2017-01-27 Fixed CWE-200

TI-2017-02459 CVE-2017-3259 · GHSA-2fjh-pp98-gvch

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).

LOW 22

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.02162 Published 2017-01-27 Fixed