RHSA-2018:2943 — Red Hat Security Advisory: java-1.8.0-openjdk security update

Fixed packages 52

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-debuginfo	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-demo	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-demo-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-devel	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-devel-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-headless	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-headless-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-javadoc	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-src	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-src-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-debuginfo	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-demo	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-demo-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-devel	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-devel-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-headless	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-headless-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-javadoc	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-src	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-src-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-debuginfo	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-demo	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-demo-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-devel	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-devel-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-headless	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-headless-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-javadoc	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-src	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-src-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-debuginfo	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-demo	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-demo-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-devel	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-devel-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-headless	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-headless-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-javadoc	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-src	1:1.8.0.191.b12-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-src-debug	1:1.8.0.191.b12-0.el6_10

Vulnerabilities 7

Unscored —

CVE-2018-3136

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 17, 2018
Unscored —

CVE-2018-3139

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 17, 2018
Unscored —

CVE-2018-3149

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 17, 2018
Unscored —

CVE-2018-3169

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions …

openjdk-8 openjdk-lts openjdk-7 openjdk8 Debian Ubuntu Alpine Wolfi

Oct 17, 2018
Unscored —

CVE-2018-3180

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported ver…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 17, 2018
Unscored —

CVE-2018-3183

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supporte…

Oracle Java openjdk-8 openjdk-lts Ubuntu Alpine Wolfi

Oct 17, 2018
Unscored —

CVE-2018-3214

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported ve…

Oracle Java openjdk-8 openjdk8 Ubuntu Alpine

Oct 17, 2018

References

article
https://access.redhat.com/security/updates/classification/#critical
report
https://bugzilla.redhat.com/show_bug.cgi?id=1639268
report
https://bugzilla.redhat.com/show_bug.cgi?id=1639293
report
https://bugzilla.redhat.com/show_bug.cgi?id=1639301
report
https://bugzilla.redhat.com/show_bug.cgi?id=1639442
report
https://bugzilla.redhat.com/show_bug.cgi?id=1639484
report
https://bugzilla.redhat.com/show_bug.cgi?id=1639755
report
https://bugzilla.redhat.com/show_bug.cgi?id=1639834
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2943.json
report
https://access.redhat.com/security/cve/CVE-2018-3136
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3136
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3136
report
https://access.redhat.com/security/cve/CVE-2018-3139
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3139
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3139
report
https://access.redhat.com/security/cve/CVE-2018-3149
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3149
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3149
report
https://access.redhat.com/security/cve/CVE-2018-3169
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3169
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3169
report
https://access.redhat.com/security/cve/CVE-2018-3180
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3180
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3180
report
https://access.redhat.com/security/cve/CVE-2018-3183
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3183
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3183
report
https://access.redhat.com/security/cve/CVE-2018-3214
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3214
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3214

Red Hat Security Advisory: java-1.8.0-openjdk security update

Fixed packages 52

Vulnerabilities 7

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions …

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported ver…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supporte…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported ve…

References