Red Hat Security Advisory: java-1.8.0-ibm security update

Fixed packages 2

Vulnerabilities 21

• High 8.1
  CVE-2018-1417

  Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code …

  IBM SDK, Java Technology Edition
  Feb 22, 2018
• High 7.5
  CVE-2018-2627

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affecte…

  Jan 18, 2018
• Unscored —
  CVE-2018-2579

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2581

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected a…

  openjfx openjfx Debian Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2582

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions …

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2588

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported ver…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2599

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2602

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions tha…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2603

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2618

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported vers…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2629

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS). Supported ver…

  openjdk-8 openjdk-9 openjdk-7 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2633

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2634

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions tha…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2637

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported vers…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2638

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affect…

  Oracle Java
  Jan 18, 2018
• Unscored —
  CVE-2018-2639

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affect…

  Oracle Java
  Jan 18, 2018
• Unscored —
  CVE-2018-2641

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2657

  Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions tha…

  Oracle Java
  Jan 18, 2018
• Unscored —
  CVE-2018-2663

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supporte…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2677

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018
• Unscored —
  CVE-2018-2678

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

  Oracle Java openjdk-8 openjdk-9 Ubuntu
  Jan 18, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534288
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534296
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534298
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534299
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534525
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534543
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534553
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534625
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534762
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534766
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534768
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534943
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534970
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535036
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535351
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535352
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1535354
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568966
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1463.json
• report
  https://access.redhat.com/security/cve/CVE-2018-1417
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1417
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1417
• article
  https://exchange.xforce.ibmcloud.com/vulnerabilities/138823
• report
  https://access.redhat.com/security/cve/CVE-2018-2579
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-2579
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-2579
• report
  https://access.redhat.com/security/cve/CVE-2018-2581
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-2581
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-2581
• article
  http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA
• report
  https://access.redhat.com/security/cve/CVE-2018-2582
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-2582
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-2582
• report
  https://access.redhat.com/security/cve/CVE-2018-2588
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-2588