Red Hat Security AdvisoryRHSA-2018:3007
java-1.6.0-sun security update
Released 2018-10-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7 +3
Fixes 9 records
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.07156 · Published 2018-10-17 · Partial fix
Priority MEDIUM 40
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06868 · Published 2018-10-17 · Partial fix
Priority LOW 36
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denia…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04378 · Published 2018-07-09 · Partial fix CWE-190
Priority LOW 34
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.04667 · Published 2018-07-18 · Partial fix
Priority LOW 31
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE).
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.03377 · Published 2018-10-17 · Partial fix
Priority LOW 26
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.03132 · Published 2018-07-18 · Partial fix
Priority LOW 25
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04426 · Published 2018-07-18 · Partial fix
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).
CVSS 3.1LOW 3.4· Network · No auth · User interaction · EPSS 0.04509 · Published 2018-10-17 · Partial fix
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.05102 · Published 2018-10-17 · Partial fix
THREATIST.IORead the docs