Red Hat Security AdvisoryRHSA-2017:3392
java-1.7.0-openjdk security and bug fix update
Released 2017-12-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4 +2
- Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el6_9
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.161-2.6.12.0.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el6_9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.161-2.6.12.0.el6_9
- Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el6_9
- Red Hat Enterprise Linux Server (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.161-2.6.12.0.el6_9
- Red Hat Enterprise Linux Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el7_4 +1
- Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el6_9
- Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.161-2.6.12.0.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el7_4 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el7_4 +1
Fixes 16 records
Priority MEDIUM 49
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.03143 · Published 2017-10-19 · Partial fix
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02962 · Published 2017-10-19 · Partial fix
Priority MEDIUM 47
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.16181 · Published 2017-10-19 · Partial fix
Priority MEDIUM 41
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.03206 · Published 2017-10-19 · Partial fix
Priority LOW 37
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO).
CVSS 3.1MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.02635 · Published 2017-10-19 · Fixed
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03114 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 35
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.02598 · Published 2017-08-08 · Fixed
Priority LOW 29
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00754 · Published 2017-10-19 · Partial fix
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 4.0· Network · No auth · No interaction · EPSS 0.02199 · Published 2017-10-19 · Partial fix
Priority LOW 20
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.02442 · Published 2017-10-19 · Partial fix
Priority LOW 20
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.02224 · Published 2017-08-08 · Fixed
THREATIST.IORead the docs