RHSA-2019:3136 — Red Hat Security Advisory: java-1.8.0-openjdk security update

Fixed packages 52

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-debuginfo	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-demo	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-demo-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-devel	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-devel-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-headless	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-headless-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-javadoc	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-src	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-src-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-debuginfo	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-demo	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-demo-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-devel	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-devel-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-headless	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-headless-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-javadoc	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-src	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-src-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-debuginfo	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-demo	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-demo-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-devel	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-devel-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-headless	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-headless-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-javadoc	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-src	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-src-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-debuginfo	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-demo	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-demo-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-devel	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-devel-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-headless	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-headless-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-javadoc	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-src	1:1.8.0.232.b09-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-src-debug	1:1.8.0.232.b09-1.el6_10

Vulnerabilities 14

Unscored —

CVE-2019-2945

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2949

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2962

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2964

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions t…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2973

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2975

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2978

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2981

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2983

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2987

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java S…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2988

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2989

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2992

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2999

Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are J…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760963
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760969
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760978
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760980
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760992
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760999
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761006
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761146
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761149
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761262
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761266
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761594
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761596
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761601
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3136.json
report
https://access.redhat.com/security/cve/CVE-2019-2945
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2945
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-2945
report
https://access.redhat.com/security/cve/CVE-2019-2949
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2949
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-2949
report
https://access.redhat.com/security/cve/CVE-2019-2962
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2962
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-2962
report
https://access.redhat.com/security/cve/CVE-2019-2964
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2964
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-2964
report
https://access.redhat.com/security/cve/CVE-2019-2973
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2973
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-2973
report
https://access.redhat.com/security/cve/CVE-2019-2975
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2975
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-2975
report
https://access.redhat.com/security/cve/CVE-2019-2978
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2978
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-2978
report
https://access.redhat.com/security/cve/CVE-2019-2981
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2981

Red Hat Security Advisory: java-1.8.0-openjdk security update

Fixed packages 52

Vulnerabilities 14

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions t…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java S…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are J…

References