Red Hat Security AdvisoryRHSA-2018:3521
java-11-openjdk security update
Released 2018-11-07 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.1.13-3.el7_6, java-11-openjdk-headless-1:11.0.1.13-3.el7_6
- Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-debug-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6 +11
- Red Hat Enterprise Linux ComputeNode (v. 7) java-11-openjdk-1:11.0.1.13-3.el7_6, java-11-openjdk-headless-1:11.0.1.13-3.el7_6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-debug-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6 +11
- Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.1.13-3.el7_6, java-11-openjdk-devel-1:11.0.1.13-3.el7_6, java-11-openjdk-headless-1:11.0.1.13-3.el7_6
- Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-debug-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6 +10
- Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.1.13-3.el7_6, java-11-openjdk-devel-1:11.0.1.13-3.el7_6, java-11-openjdk-headless-1:11.0.1.13-3.el7_6
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-debug-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6 +10
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) java-11-openjdk-1:11.0.1.13-3.el7_6, java-11-openjdk-devel-1:11.0.1.13-3.el7_6, java-11-openjdk-headless-1:11.0.1.13-3.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) java-11-openjdk-debug-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-1:11.0.1.13-3.el7_6, java-11-openjdk-demo-debug-1:11.0.1.13-3.el7_6 +10
Fixes 7 records
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.07156 · Published 2018-10-17 · Partial fix
Priority MEDIUM 46
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting).
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.02802 · Published 2018-10-17 · Fixed
Priority MEDIUM 45
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.04395 · Published 2018-10-17 · Fixed
Priority LOW 31
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE).
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.03377 · Published 2018-10-17 · Partial fix
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).
CVSS 3.1LOW 3.4· Network · No auth · User interaction · EPSS 0.04509 · Published 2018-10-17 · Partial fix
Priority LOW 23
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility).
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.0276 · Published 2018-10-17 · Fixed
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.05102 · Published 2018-10-17 · Partial fix
THREATIST.IORead the docs