Description
A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Operations Analytics Predictive Insights | 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.5, 1.3.6 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.4.10-1jpp.3.el7 | RHSA-2017:2481 |
| RHEL 7 | java-1.8.0-ibm +5 | 1:1.8.0.4.10-1jpp.3.el7 | RHSA-2017:2469 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.4.10-1jpp.2.el6_9 | RHSA-2017:2481 |
| RHEL 6 | java-1.8.0-ibm +5 | 1:1.8.0.4.10-1jpp.1.el6_9 | RHSA-2017:2469 |
Advisories 2
- RHSA-2017:2481 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:2469 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026