Red Hat Security AdvisoryRHSA-2017:0338
java-1.6.0-ibm security update
Released 2017-02-28 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11, java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11.i386, java-1.6.0-ibm-accessibility-1:1.6.0.16.41-1jpp.1.el5_11 +13
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-demo-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-devel-1:1.6.0.16.41-1jpp.1.el6_8 +4
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-demo-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-devel-1:1.6.0.16.41-1jpp.1.el6_8 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11, java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11.i386, java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11.ppc +21
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-demo-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-devel-1:1.6.0.16.41-1jpp.1.el6_8 +4
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-demo-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-devel-1:1.6.0.16.41-1jpp.1.el6_8 +4
Fixes 12 records
Priority HIGH 83
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obt…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.94697 · Published 2016-09-01 · Partial fix CWE-200
Priority HIGH 66
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI).
CVSS 3.0CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.32839 · Published 2017-01-27 · Fixed CWE-20
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02997 · Published 2017-01-27 · Fixed
Priority MEDIUM 45
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D).
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03868 · Published 2017-01-27 · Fixed
Priority MEDIUM 45
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03167 · Published 2017-01-27 · Fixed
Priority LOW 35
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02729 · Published 2017-01-27 · Fixed
Priority LOW 35
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.03144 · Published 2017-01-27 · Fixed
Priority LOW 34
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02972 · Published 2017-01-27 · Fixed
Priority LOW 30
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS).
CVSS 3.0MEDIUM 5.8· Network · Low privileges · User interaction · EPSS 0.01933 · Published 2017-01-27 · Fixed
Priority LOW 25
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.02499 · Published 2017-01-27 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.02166 · Published 2017-01-27 · Fixed CWE-200
Priority LOW 22
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.02162 · Published 2017-01-27 · Fixed
THREATIST.IORead the docs