Red Hat Security Advisory

RHSA-2018:3409

java-1.7.0-openjdk security update

Released 2018-10-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-devel-1:1.7.0.201-2.6.16.0.el6_10
Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-javadoc-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-src-1:1.7.0.201-2.6.16.0.el6_10
Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-devel-1:1.7.0.201-2.6.16.0.el6_10
Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-javadoc-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-src-1:1.7.0.201-2.6.16.0.el6_10
Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-devel-1:1.7.0.201-2.6.16.0.el6_10
Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-javadoc-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-src-1:1.7.0.201-2.6.16.0.el6_10
Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-devel-1:1.7.0.201-2.6.16.0.el6_10
Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-javadoc-1:1.7.0.201-2.6.16.0.el6_10, java-1.7.0-openjdk-src-1:1.7.0.201-2.6.16.0.el6_10

TI-2018-02439 CVE-2018-3149 · GHSA-8jrq-fr7j-4qx5

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.07156 Published 2018-10-17 Partial fix

TI-2018-02459 CVE-2018-3169 · GHSA-2q2m-64x8-6r9q

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.04395 Published 2018-10-17 Fixed

TI-2018-02503 CVE-2018-3214 · GHSA-458x-p845-2qr2

MEDIUM 40

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06868 Published 2018-10-17 Partial fix

TI-2018-02470 CVE-2018-3180 · GHSA-3935-63gc-3p79

LOW 31

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE).

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.03377 Published 2018-10-17 Partial fix

TI-2018-02426 CVE-2018-3136 · GHSA-f6rv-hvw7-6w6f

LOW 24

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).

CVSS 3.1LOW 3.4 Network No auth User interaction EPSS 0.04509 Published 2018-10-17 Partial fix

TI-2018-02429 CVE-2018-3139 · GHSA-fv88-cxjq-vfmv

LOW 23

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.05102 Published 2018-10-17 Partial fix