Red Hat Security Advisory: java-1.8.0-oracle security update

Fixed packages 6

Vulnerabilities 10

• Medium 6.5
  CVE-2018-13785

  In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an …

  openjdk8 openjdk7 libpng1.6 libpng1.6 Debian Ubuntu Alpine
  Jul 9, 2018
• Unscored —
  CVE-2018-3136

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 17, 2018
• Unscored —
  CVE-2018-3139

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 17, 2018
• Unscored —
  CVE-2018-3149

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported ver…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 17, 2018
• Unscored —
  CVE-2018-3169

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions …

  openjdk-8 openjdk-lts openjdk-7 openjdk8 Debian Ubuntu Alpine Wolfi
  Oct 17, 2018
• Unscored —
  CVE-2018-3180

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported ver…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 17, 2018
• Unscored —
  CVE-2018-3183

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supporte…

  Oracle Java openjdk-8 openjdk-lts Ubuntu Alpine Wolfi
  Oct 17, 2018
• Unscored —
  CVE-2018-3209

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). The supported version that is affected…

  openjfx openjfx Debian Ubuntu
  Oct 17, 2018
• Unscored —
  CVE-2018-3211

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serviceability). Supported ve…

  Oracle Java
  Oct 17, 2018
• Unscored —
  CVE-2018-3214

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported ve…

  Oracle Java openjdk-8 openjdk8 Ubuntu Alpine
  Oct 17, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1599943
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639268
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639293
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639301
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639442
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639484
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639755
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639834
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1639906
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3003.json
• report
  https://access.redhat.com/security/cve/CVE-2018-3136
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3136
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3136
• report
  https://access.redhat.com/security/cve/CVE-2018-3139
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3139
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3139
• report
  https://access.redhat.com/security/cve/CVE-2018-3149
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3149
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3149
• report
  https://access.redhat.com/security/cve/CVE-2018-3169
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3169
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3169
• report
  https://access.redhat.com/security/cve/CVE-2018-3180
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3180
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3180
• report
  https://access.redhat.com/security/cve/CVE-2018-3183
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3183
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3183
• report
  https://access.redhat.com/security/cve/CVE-2018-3209
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3209
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3209
• article
  https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixJAVA
• report
  https://access.redhat.com/security/cve/CVE-2018-3211
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3211
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3211
• report
  https://access.redhat.com/security/cve/CVE-2018-3214
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3214