Red Hat Security Advisory

RHSA-2019:1810

java-11-openjdk security update

Released 2019-07-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.4.11-0.el7_6, java-11-openjdk-headless-1:11.0.4.11-0.el7_6
Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-debug-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-debug-1:11.0.4.11-0.el7_6 +11
Red Hat Enterprise Linux ComputeNode (v. 7) java-11-openjdk-1:11.0.4.11-0.el7_6, java-11-openjdk-headless-1:11.0.4.11-0.el7_6
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-debug-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-debug-1:11.0.4.11-0.el7_6 +11
Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.4.11-0.el7_6, java-11-openjdk-devel-1:11.0.4.11-0.el7_6, java-11-openjdk-headless-1:11.0.4.11-0.el7_6
Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-debug-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-debug-1:11.0.4.11-0.el7_6 +10
Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.4.11-0.el7_6, java-11-openjdk-devel-1:11.0.4.11-0.el7_6, java-11-openjdk-headless-1:11.0.4.11-0.el7_6
Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-debug-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-debug-1:11.0.4.11-0.el7_6 +10
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) java-11-openjdk-1:11.0.4.11-0.el7_6, java-11-openjdk-devel-1:11.0.4.11-0.el7_6, java-11-openjdk-headless-1:11.0.4.11-0.el7_6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) java-11-openjdk-debug-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-1:11.0.4.11-0.el7_6, java-11-openjdk-demo-debug-1:11.0.4.11-0.el7_6 +10

Fixes 7 records

TI-2019-02310 CVE-2019-2769 · GHSA-pc8x-vq86-p9h4

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 37

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04351 Published 2019-07-23 Fixed

TI-2019-02303 CVE-2019-2762 · GHSA-h4f9-wrfv-243r

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 37

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04351 Published 2019-07-23 Fixed

TI-2019-02361 CVE-2019-2821 · GHSA-4664-6235-3f5j

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE).

LOW 28

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE).

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.01961 Published 2019-07-23 Fixed

TI-2019-02356 CVE-2019-2816 · GHSA-wv7c-w578-4jm4

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 26

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.02286 Published 2019-07-23 Fixed

TI-2019-02286 CVE-2019-2745 · GHSA-ff2w-wwj3-c5m5

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).

LOW 24

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.0046 Published 2019-07-23 Fixed

TI-2019-02327 CVE-2019-2786 · GHSA-fp8v-gg7x-5qrf

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 21

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).

CVSS 3.1LOW 3.4 Network No auth User interaction EPSS 0.02613 Published 2019-07-23 Fixed

TI-2019-02358 CVE-2019-2818 · GHSA-vxcg-q298-6w55

Observable discrepancy in Oracle Java

LOW 19

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).

CVSS 3.0LOW 3.1 Network No auth User interaction EPSS 0.01636 Published 2019-07-23 Fixed CWE-203