Red Hat Security AdvisoryRHSA-2019:4115
java-1.8.0-ibm security update
Released 2019-12-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.0-1jpp.1.el7 +3
- Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.0-1jpp.1.el7 +1
- Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.0-1jpp.1.el7 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.0-1jpp.1.el7 +3
Fixes 14 records
Priority MEDIUM 43
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02066 · Published 2019-10-17 · Fixed CWE-285
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.03224 · Published 2019-10-16 · Fixed
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.03313 · Published 2019-10-16 · Fixed
Priority LOW 27
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc).
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.02598 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment).
CVSS 3.1MEDIUM 4.2· Network · No auth · User interaction · EPSS 0.02204 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03452 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03732 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03732 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03715 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03517 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03517 · Published 2019-10-16 · Fixed
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03269 · Published 2019-10-16 · Fixed
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03269 · Published 2019-10-16 · Fixed
Priority LOW 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.03271 · Published 2019-10-16 · Fixed
THREATIST.IORead the docs