Red Hat Security Advisory: java-1.7.1-ibm security update

Fixed packages 12

Vulnerabilities 14

• High 7.5
  CVE-2016-2183 Public exploit EPSS 95%

  The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

  openjdk-8 openssl openjdk-7 openssl Ubuntu Alpine
  Sep 1, 2016
• Unscored —
  CVE-2016-5546

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

  Oracle Java SE Java SE Embedded JRockit Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2016-5547

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

  Oracle Java SE Java SE Embedded JRockit Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2016-5548

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

  Oracle Java SE Java SE Embedded openjdk-8 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2016-5549

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

  Oracle Java SE Java SE Embedded openjdk-8 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2016-5552

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Support…

  Oracle Java SE Java SE Embedded JRockit Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3231

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

  Oracle Java SE Java SE Embedded openjdk-8 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3241 Public exploit EPSS 33%

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported vers…

  Oracle Java SE Java SE Embedded JRockit Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3252

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported ver…

  openjdk-8 openjdk-7 openjdk-6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3253

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versi…

  Oracle Java SE Java SE Embedded JRockit Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3259

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affect…

  Oracle Java SE
  Jan 27, 2017
• Unscored —
  CVE-2017-3261

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

  openjdk-8 openjdk-7 openjdk-6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3272

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported version…

  Oracle Java SE Java SE Embedded openjdk-8 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3289

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions …

  Oracle Java SE Java SE Embedded openjdk-8 Ubuntu
  Jan 27, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://developer.ibm.com/javasdk/support/security-vulnerabilities/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1369383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413554
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413562
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413583
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413717
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413764
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413882
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413906
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413911
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413920
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413923
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1413955
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414163
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0336.json
• report
  https://access.redhat.com/security/cve/CVE-2016-2183
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-2183
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-2183
• article
  https://access.redhat.com/articles/2548661
• article
  https://access.redhat.com/errata/RHSA-2016:1940
• article
  https://sweet32.info/
• report
  https://access.redhat.com/security/cve/CVE-2016-5546
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5546
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5546
• report
  https://access.redhat.com/security/cve/CVE-2016-5547
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5547
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5547
• report
  https://access.redhat.com/security/cve/CVE-2016-5548
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5548
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5548
• report
  https://access.redhat.com/security/cve/CVE-2016-5549
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5549
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5549
• report
  https://access.redhat.com/security/cve/CVE-2016-5552
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5552
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5552
• report
  https://access.redhat.com/security/cve/CVE-2017-3231