ELSA-2018-0349 — Important: java-1.7.0-openjdk security update (Oracle Linux 7)

Summary

[1:1.7.0.171-2.6.13.0.0.1]
- Update DISTRO_NAME in specfile

[1:1.7.0.171-2.6.13.0]
- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	java-1.7.0-openjdk	1:1.7.0.171-2.6.13.0.0.1.el7_4
Oracle Linux · 7	java-1.7.0-openjdk-accessibility	1:1.7.0.171-2.6.13.0.0.1.el7_4
Oracle Linux · 7	java-1.7.0-openjdk-demo	1:1.7.0.171-2.6.13.0.0.1.el7_4
Oracle Linux · 7	java-1.7.0-openjdk-devel	1:1.7.0.171-2.6.13.0.0.1.el7_4
Oracle Linux · 7	java-1.7.0-openjdk-headless	1:1.7.0.171-2.6.13.0.0.1.el7_4
Oracle Linux · 7	java-1.7.0-openjdk-javadoc	1:1.7.0.171-2.6.13.0.0.1.el7_4
Oracle Linux · 7	java-1.7.0-openjdk-src	1:1.7.0.171-2.6.13.0.0.1.el7_4

Vulnerabilities 14

Unscored —

CVE-2018-2579

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2588

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported ver…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2599

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2602

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions tha…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2603

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2618

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported vers…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2629

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS). Supported ver…

openjdk-8 openjdk-9 openjdk-7 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2633

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2634

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions tha…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2637

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported vers…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2641

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2663

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2677

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2678

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

Oracle Java openjdk-8 openjdk-9 Ubuntu

Jan 18, 2018

Important: java-1.7.0-openjdk security update (Oracle Linux 7)

Summary

Fixed packages 7

Vulnerabilities 14

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported ver…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported vers…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS). Supported ver…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported vers…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…