Red Hat Security Advisory

RHSA-2017:2998

java-1.8.0-openjdk security update

Released 2017-10-20 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el7_4
Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el7_4 +11
Red Hat Enterprise Linux ComputeNode (v. 7) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el7_4
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el7_4 +11
Red Hat Enterprise Linux Desktop (v. 6) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el6_9
Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-debug-1:1.8.0.151-1.b12.el6_9 +7
Red Hat Enterprise Linux HPC Node (v. 6) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el6_9
Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-debug-1:1.8.0.151-1.b12.el6_9 +6
Red Hat Enterprise Linux Server (v. 6) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el6_9
Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el7_4
Red Hat Enterprise Linux Server Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-debug-1:1.8.0.151-1.b12.el6_9 +6
Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el7_4 +10
Red Hat Enterprise Linux Workstation (v. 6) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el6_9
Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el7_4
Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-debug-1:1.8.0.151-1.b12.el6_9 +6
Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el7_4 +10

Fixes 14 records

TI-2017-07636 CVE-2017-10285 · GHSA-gmm7-r638-2wvf

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 49

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.03143 Published 2017-10-19 Partial fix

TI-2017-07689 CVE-2017-10346 · GHSA-m98w-5j58-c7m7

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02962 Published 2017-10-19 Partial fix

TI-2017-07698 CVE-2017-10355 · GHSA-c7m6-53c4-386j

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 47

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.16181 Published 2017-10-19 Partial fix

TI-2017-07727 CVE-2017-10388 · GHSA-8j2p-7p84-f2f5

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 41

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.03206 Published 2017-10-19 Partial fix

TI-2017-07625 CVE-2017-10274 · GHSA-22qx-hc7j-pqmg

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO).

LOW 37

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO).

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.02635 Published 2017-10-19 Fixed

TI-2017-07700 CVE-2017-10357 · GHSA-g4h8-pg44-c6f7

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 36

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03305 Published 2017-10-19 Partial fix

TI-2017-07693 CVE-2017-10350 · GHSA-gxhg-2xqp-6h9p

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 36

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03305 Published 2017-10-19 Partial fix

TI-2017-07692 CVE-2017-10349 · GHSA-rm36-hx9f-89cx

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 36

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03305 Published 2017-10-19 Partial fix

TI-2017-07691 CVE-2017-10348 · GHSA-v47r-hqv5-fhh8

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 36

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03305 Published 2017-10-19 Partial fix

TI-2017-07690 CVE-2017-10347 · GHSA-jvfh-rgp2-xc77

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent…

LOW 36

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03114 Published 2017-10-19 Partial fix

TI-2017-07632 CVE-2017-10281 · GHSA-6r8c-cj9q-27wh

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 36

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03305 Published 2017-10-19 Partial fix

TI-2017-07699 CVE-2017-10356 · GHSA-48hc-p2wv-prx2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 29

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00754 Published 2017-10-19 Partial fix

TI-2017-07642 CVE-2017-10295 · GHSA-vg5w-8wf5-8234

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 23

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).

CVSS 3.1MEDIUM 4.0 Network No auth No interaction EPSS 0.02199 Published 2017-10-19 Partial fix

TI-2017-07688 CVE-2017-10345 · GHSA-p7q9-c7hh-v46v

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 20

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.02442 Published 2017-10-19 Partial fix