Red Hat Security Advisory

RHSA-2017:2469

java-1.8.0-ibm security update

Released 2017-08-14 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7, java-1.8.0-ibm-demo-1:1.8.0.4.10-1jpp.3.el7, java-1.8.0-ibm-devel-1:1.8.0.4.10-1jpp.3.el7 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7, java-1.8.0-ibm-demo-1:1.8.0.4.10-1jpp.3.el7, java-1.8.0-ibm-devel-1:1.8.0.4.10-1jpp.3.el7 +1
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.4.10-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.4.10-1jpp.1.el6_9 +3
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.4.10-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.4.10-1jpp.1.el6_9 +1
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.4.10-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.4.10-1jpp.1.el6_9 +3
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7, java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7.ppc, java-1.8.0-ibm-demo-1:1.8.0.4.10-1jpp.3.el7 +5
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.4.10-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.4.10-1jpp.1.el6_9 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7, java-1.8.0-ibm-demo-1:1.8.0.4.10-1jpp.3.el7, java-1.8.0-ibm-devel-1:1.8.0.4.10-1jpp.3.el7 +3

Fixes 18 records

TI-2017-07462 CVE-2017-10107 · GHSA-mc66-3p3f-495v

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02555 Published 2017-08-08 Fixed

TI-2017-07456 CVE-2017-10101 · GHSA-fvw3-2rhp-cg4g

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02555 Published 2017-08-08 Fixed

TI-2017-07451 CVE-2017-10096 · GHSA-2369-v4cc-9249

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02555 Published 2017-08-08 Fixed

TI-2017-07445 CVE-2017-10090 · GHSA-cxmw-m357-3ccf

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02555 Published 2017-08-08 Fixed

TI-2017-07442 CVE-2017-10087 · GHSA-cmc3-3g59-rjpp

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02555 Published 2017-08-08 Fixed

TI-2017-07465 CVE-2017-10110 · GHSA-frc6-mcr5-mvhg

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT).

MEDIUM 47

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02415 Published 2017-08-08 Fixed

TI-2017-07444 CVE-2017-10089 · GHSA-cxmj-qw2c-j8g5

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO).

MEDIUM 47

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02415 Published 2017-08-08 Fixed

TI-2017-01130 CVE-2017-1376 · GHSA-qh9p-7gfq-6xr8

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security…

MEDIUM 47

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02634 Published 2017-08-28 Partial fix CWE-829

TI-2017-07457 CVE-2017-10102 · GHSA-8g4v-8wp4-4xf6

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 46

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.02971 Published 2017-08-08 Fixed

TI-2017-07471 CVE-2017-10116 · GHSA-f768-54w8-49w2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 44

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.03386 Published 2017-08-08 Fixed

TI-2017-07470 CVE-2017-10115 · GHSA-9v9m-q232-6h4r

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 44

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02737 Published 2017-08-08 Fixed

TI-2017-07433 CVE-2017-10078 · GHSA-3hc7-w9rg-6mh4

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting).

MEDIUM 42

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.02402 Published 2017-08-08 Fixed

TI-2017-07422 CVE-2017-10067 · GHSA-fp98-qh89-292g

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).

MEDIUM 41

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.03313 Published 2017-08-08 Fixed

TI-2017-07594 CVE-2017-10243 · GHSA-wqj8-9x47-986x

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 40

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.02862 Published 2017-08-08 Fixed

TI-2017-07464 CVE-2017-10109 · GHSA-xvgr-78mp-2mg2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 36

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03114 Published 2017-08-08 Fixed

TI-2017-07463 CVE-2017-10108 · GHSA-qv9x-r5q9-54mm

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 36

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03114 Published 2017-08-08 Fixed

TI-2017-07408 CVE-2017-10053 · GHSA-m2wj-546g-x92m

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 36

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0345 Published 2017-08-08 Fixed

TI-2017-07460 CVE-2017-10105 · GHSA-4v4c-962p-vm5x

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).

LOW 24

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01913 Published 2017-08-08 Fixed