High ELSA-2019-0791 3 CVEs

Important: java-1.7.0-openjdk security update (Oracle Linux 7)

Published Apr 22, 2019 · Updated Apr 22, 2019

Ecosystem: Oracle Linux

Summary

[1:1.7.0.221-2.6.18.0.0.1]
- Update DISTRO_NAME in specfile

[1:1.7.0.221-2.6.18.0]
- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	java-1.7.0-openjdk	1:1.7.0.221-2.6.18.0.0.1.el7_6
Oracle Linux · 7	java-1.7.0-openjdk-accessibility	1:1.7.0.221-2.6.18.0.0.1.el7_6
Oracle Linux · 7	java-1.7.0-openjdk-demo	1:1.7.0.221-2.6.18.0.0.1.el7_6
Oracle Linux · 7	java-1.7.0-openjdk-devel	1:1.7.0.221-2.6.18.0.0.1.el7_6
Oracle Linux · 7	java-1.7.0-openjdk-headless	1:1.7.0.221-2.6.18.0.0.1.el7_6
Oracle Linux · 7	java-1.7.0-openjdk-javadoc	1:1.7.0.221-2.6.18.0.0.1.el7_6
Oracle Linux · 7	java-1.7.0-openjdk-src	1:1.7.0.221-2.6.18.0.0.1.el7_6

Vulnerabilities 3

Unscored —

CVE-2019-2602

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 23, 2019
Unscored —

CVE-2019-2684 EPSS 38%

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 23, 2019
Unscored —

CVE-2019-2698 Public exploit EPSS 12%

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are J…

Oracle Java openjdk-8 openjdk8 Debian Ubuntu Alpine

Apr 23, 2019