Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 rhel_extras:6 | java-1.7.1-ibm | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat · RHEL 6 rhel_extras:6 | java-1.7.1-ibm-demo | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat · RHEL 6 rhel_extras:6 | java-1.7.1-ibm-devel | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat · RHEL 6 rhel_extras:6 | java-1.7.1-ibm-jdbc | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat · RHEL 6 rhel_extras:6 | java-1.7.1-ibm-plugin | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat · RHEL 6 rhel_extras:6 | java-1.7.1-ibm-src | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat · RHEL 7 rhel_extras:7 | java-1.7.1-ibm | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat · RHEL 7 rhel_extras:7 | java-1.7.1-ibm-demo | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat · RHEL 7 rhel_extras:7 | java-1.7.1-ibm-devel | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat · RHEL 7 rhel_extras:7 | java-1.7.1-ibm-jdbc | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat · RHEL 7 rhel_extras:7 | java-1.7.1-ibm-plugin | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat · RHEL 7 rhel_extras:7 | java-1.7.1-ibm-src | 1:1.7.1.3.30-1jpp.1.el7 |
Vulnerabilities 11
-
Unscored —
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 be…
-
Unscored —
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…
-
Unscored —
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.1…
-
Unscored —CVE-2015-8126 EPSS 10%
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2…
-
Unscored —
Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x befor…
-
Unscored —
Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1…
-
Unscored —
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…
-
Unscored —
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and J…
-
Unscored —
Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8…
-
Unscored —CVE-2016-0483 EPSS 15%
Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows re…
-
Unscored —
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
article
http://www.ibm.com/developerworks/java/jdk/alerts/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1276416
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1281756
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1289841
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1291312
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1298906
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1298957
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1299073
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1299385
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1299441
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1302689
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0099.json
-
report
https://access.redhat.com/security/cve/CVE-2015-5041
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-5041
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-5041
-
report
https://access.redhat.com/security/cve/CVE-2015-7575
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-7575
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-7575
-
article
http://www.mitls.org/pages/attacks/SLOTH
-
article
https://access.redhat.com/articles/2112261
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/
-
report
https://access.redhat.com/security/cve/CVE-2015-7981
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-7981
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-7981
-
report
https://access.redhat.com/security/cve/CVE-2015-8126
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-8126
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-8126
-
report
https://access.redhat.com/security/cve/CVE-2015-8472
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-8472
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-8472
-
report
https://access.redhat.com/security/cve/CVE-2015-8540
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-8540
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-8540
-
report
https://access.redhat.com/security/cve/CVE-2016-0402
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-0402
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-0402
-
article
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixJAVA
-
report
https://access.redhat.com/security/cve/CVE-2016-0448