Red Hat Security Advisory

RHSA-2019:1164

java-1.8.0-ibm security update

Released 2019-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.35-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.35-1jpp.1.el7 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.35-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.35-1jpp.1.el7 +1
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.35-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.35-1jpp.1.el7 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.35-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.35-1jpp.1.el7 +3

Fixes 5 records

TI-2019-02233 CVE-2019-2684 · GHSA-x59f-cpgf-vmmv

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 53

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.37618 Published 2019-04-23 Fixed

TI-2019-02247 CVE-2019-2698 · GHSA-p55v-v6gp-5c6j

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D).

MEDIUM 51

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.12013 Published 2019-04-23 Fixed

TI-2019-02246 CVE-2019-2697 · GHSA-rpf9-c8x3-2pp3

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D).

MEDIUM 51

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.11466 Published 2019-04-23 Fixed

TI-2019-02152 CVE-2019-2602 · GHSA-cq96-vcc6-mj28

Uncontrolled resource consumption in Oracle Java

MEDIUM 46

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0441 Published 2019-04-23 Fixed CWE-400

TI-2019-07560 CVE-2019-10245 · GHSA-jq73-mhwg-56vq

Improper input validation in Eclipse OpenJ9

LOW 38

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02492 Published 2019-04-19 Fixed in 0.14.0 CWE-20