Red Hat Security AdvisoryRHSA-2018:0349
java-1.7.0-openjdk security update
Released 2018-02-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.171-2.6.13.0.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el7_4 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.171-2.6.13.0.el7_4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el7_4 +2
- Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el6_9
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.171-2.6.13.0.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el6_9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.171-2.6.13.0.el6_9
- Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el6_9
- Red Hat Enterprise Linux Server (v. 7) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.171-2.6.13.0.el7_4
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.171-2.6.13.0.el6_9
- Red Hat Enterprise Linux Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.171-2.6.13.0.el7_4 +1
- Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el6_9
- Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.171-2.6.13.0.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.171-2.6.13.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.171-2.6.13.0.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.171-2.6.13.0.el7_4 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.171-2.6.13.0.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.171-2.6.13.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.171-2.6.13.0.el7_4 +1
Fixes 14 records
Priority MEDIUM 47
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.0565 · Published 2018-01-18 · Partial fix
Priority MEDIUM 42
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX).
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.04618 · Published 2018-01-18 · Partial fix
Priority MEDIUM 40
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06905 · Published 2018-01-18 · Partial fix
Priority LOW 37
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS).
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.04532 · Published 2018-01-18 · Fixed
Priority LOW 35
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.05107 · Published 2018-01-18 · Partial fix
Priority LOW 34
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.04721 · Published 2018-01-18 · Partial fix
Priority LOW 32
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS).
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.04829 · Published 2018-01-18 · Fixed
Priority LOW 29
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.04162 · Published 2018-01-18 · Partial fix
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.04675 · Published 2018-01-18 · Partial fix
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT).
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.04675 · Published 2018-01-18 · Partial fix
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.04675 · Published 2018-01-18 · Partial fix
Priority LOW 26
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP).
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.03435 · Published 2018-01-18 · Partial fix
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04078 · Published 2018-01-18 · Partial fix
Priority LOW 22
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n).
CVSS 3.1MEDIUM 4.5· Local · No auth · User interaction · EPSS 0.00631 · Published 2018-01-18 · Partial fix
THREATIST.IORead the docs