Red Hat Security AdvisoryRHSA-2019:2585
java-1.8.0-ibm security update
Released 2019-09-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7 +3
- Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7 +1
- Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7 +3
Fixes 7 records
Priority MEDIUM 46
In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02098 · Published 2019-07-17 · Fixed in 0.15.0 CWE-787
Priority LOW 37
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04351 · Published 2019-07-23 · Fixed
Priority LOW 37
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04351 · Published 2019-07-23 · Fixed
Priority LOW 36
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.09393 · Published 2019-02-04 · Partial fix CWE-416
Priority LOW 35
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the…
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.01468 · Published 2019-07-30 · Fixed in 0.15.0 CWE-367
Priority LOW 26
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.02286 · Published 2019-07-23 · Fixed
Priority LOW 21
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).
CVSS 3.1LOW 3.4· Network · No auth · User interaction · EPSS 0.02613 · Published 2019-07-23 · Fixed
THREATIST.IORead the docs