Red Hat Security AdvisoryRHSA-2023:4160
java-1.8.0-ibm security update
Released 2023-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.8.5-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.8.5-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.8.5-1jpp.1.el7 +3
- Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.8.5-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.8.5-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.8.5-1jpp.1.el7 +1
- Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.8.5-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.8.5-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.8.5-1jpp.1.el7 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.8.5-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.8.5-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.8.5-1jpp.1.el7 +3
Fixes 7 records
Priority MEDIUM 46
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01761 · Published 2023-08-02 · Partial fix CWE-502
Priority LOW 37
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.01295 · Published 2023-04-18 · Partial fix
Priority LOW 30
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01523 · Published 2023-04-18 · Partial fix
Priority LOW 29
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02474 · Published 2023-04-18 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01036 · Published 2023-04-18 · Partial fix CWE-284
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01208 · Published 2023-04-18 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01208 · Published 2023-04-18 · Partial fix
THREATIST.IORead the docs