Skip to content
OpenAdvisories
Unscored RHSA-2016:0098 10 CVEs

Red Hat Security Advisory: java-1.8.0-ibm security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 7 rhel_extras:7 java-1.8.0-ibm 1:1.8.0.2.10-1jpp.1.el7
Red Hat · RHEL 7 rhel_extras:7 java-1.8.0-ibm-demo 1:1.8.0.2.10-1jpp.1.el7
Red Hat · RHEL 7 rhel_extras:7 java-1.8.0-ibm-devel 1:1.8.0.2.10-1jpp.1.el7
Red Hat · RHEL 7 rhel_extras:7 java-1.8.0-ibm-jdbc 1:1.8.0.2.10-1jpp.1.el7
Red Hat · RHEL 7 rhel_extras:7 java-1.8.0-ibm-plugin 1:1.8.0.2.10-1jpp.1.el7
Red Hat · RHEL 7 rhel_extras:7 java-1.8.0-ibm-src 1:1.8.0.2.10-1jpp.1.el7

Vulnerabilities 10

  • Unscored —
    CVE-2015-5041

    The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 be…

  • Unscored —
    CVE-2015-7575

    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…

    thunderbird firefox openssl openjdk-7 Debian Ubuntu
  • Unscored —
    CVE-2015-8126 EPSS 10%

    Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2…

    fltk libpng Ubuntu Azure Linux
  • Unscored —
    CVE-2015-8472

    Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x befor…

    fltk libpng1.6 libpng Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2016-0402

    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2016-0448

    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and J…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2016-0466

    Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2016-0475

    Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embe…

  • Unscored —
    CVE-2016-0483 EPSS 15%

    Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows re…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2016-0494

    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.ibm.com/developerworks/java/jdk/alerts/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1281756
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1289841
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298949
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298957
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1299073
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1299385
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1299441
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1302689
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0098.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5041
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5041
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5041
  • report
    https://access.redhat.com/security/cve/CVE-2015-7575
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7575
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7575
  • article
    http://www.mitls.org/pages/attacks/SLOTH
  • article
    https://access.redhat.com/articles/2112261
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/
  • report
    https://access.redhat.com/security/cve/CVE-2015-8126
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8126
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8126
  • report
    https://access.redhat.com/security/cve/CVE-2015-8472
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8472
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8472
  • report
    https://access.redhat.com/security/cve/CVE-2016-0402
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0402
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0402
  • article
    http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixJAVA
  • report
    https://access.redhat.com/security/cve/CVE-2016-0448
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0448
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0448
  • report
    https://access.redhat.com/security/cve/CVE-2016-0466
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0466
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0466
  • report
    https://access.redhat.com/security/cve/CVE-2016-0475
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0475