Red Hat Security Advisory

RHSA-2019:0469

java-1.8.0-ibm security update

Released 2019-03-06 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10, java-1.8.0-ibm-demo-1:1.8.0.5.30-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.30-1jpp.1.el6_10 +3
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10, java-1.8.0-ibm-demo-1:1.8.0.5.30-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.30-1jpp.1.el6_10 +1
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10, java-1.8.0-ibm-demo-1:1.8.0.5.30-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.30-1jpp.1.el6_10 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10, java-1.8.0-ibm-demo-1:1.8.0.5.30-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.30-1jpp.1.el6_10 +3

Fixes 5 records

TI-2018-09008 CVE-2018-12549 · GHSA-xpfc-p72p-hwch

Improper input validation in Eclipse OpenJ9

MEDIUM 47

In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02332 Published 2019-02-11 Fixed CWE-111

TI-2018-09006 CVE-2018-12547 · GHSA-5qhh-4q6m-8w7h

Improper input validation in Eclipse OpenJ9

MEDIUM 47

In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02744 Published 2019-02-11 Fixed in 0.12.0 CWE-20

TI-2018-07976 CVE-2018-11212 · GHSA-m7r9-q69w-q556

An issue was discovered in libjpeg 9a and 9d.

LOW 36

An issue was discovered in libjpeg 9a and 9d.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.04558 Published 2018-05-16 Partial fix CWE-369

TI-2019-02007 CVE-2019-2449 · GHSA-f342-vvpf-f8xr

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).

LOW 21

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.02979 Published 2019-01-16 Fixed

TI-2019-01981 CVE-2019-2422 · GHSA-9hmr-2699-952q

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries).

LOW 21

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.03374 Published 2019-01-16 Fixed