Red Hat Security Advisory: java-1.8.0-ibm security update

Fixed packages 6

Vulnerabilities 7

• Medium 5.3
  CVE-2019-7317

  png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called un…

  thunderbird firefox thunderbird firefox-esr Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 4, 2019
• Unscored —
  CVE-2019-11772

  In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided by…

  The Eclipse Foundation Eclipse OpenJ9
  Jul 17, 2019
• Unscored —
  CVE-2019-11775

  All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is…

  The Eclipse Foundation Eclipse OpenJ9
  Jul 30, 2019
• Unscored —
  CVE-2019-2762

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported version…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 23, 2019
• Unscored —
  CVE-2019-2769

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported version…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 23, 2019
• Unscored —
  CVE-2019-2786

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 23, 2019
• Unscored —
  CVE-2019-2816

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versio…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 23, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1672409
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1730056
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1730099
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1730255
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1730415
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1738547
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1738549
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2585.json
• report
  https://access.redhat.com/security/cve/CVE-2019-2762
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2762
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2762
• report
  https://access.redhat.com/security/cve/CVE-2019-2769
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2769
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2769
• report
  https://access.redhat.com/security/cve/CVE-2019-2786
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2786
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2786
• report
  https://access.redhat.com/security/cve/CVE-2019-2816
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2816
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2816
• report
  https://access.redhat.com/security/cve/CVE-2019-7317
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-7317
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-7317
• report
  https://access.redhat.com/security/cve/CVE-2019-11772
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11772
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11772
• report
  https://access.redhat.com/security/cve/CVE-2019-11775
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11775
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11775