Description
Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | SDK, Java Technology Edition | 7.1, 8.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.4.20-1jpp.1.el7 | RHSA-2018:0458 |
| RHEL 7 | java-1.8.0-ibm +5 | 1:1.8.0.5.10-1jpp.1.el7 | RHSA-2018:0351 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.4.20-1jpp.3.el6_9 | RHSA-2018:0521 |
| RHEL 6 | java-1.8.0-ibm +5 | 1:1.8.0.5.10-1jpp.1.el6_9 | RHSA-2018:0352 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.8.0-ibm +1 | 1:1.8.0.5.10-1jpp.1.el6_9 | RHSA-2018:1463 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 | java-1_8_0-ibm | 1.8.0_sr5.15-3.3.4 | SUSE-SU-2018:2068-1 |
| SLES 12 SP3 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-1 |
| SLES 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.15-30.33.1 | SUSE-SU-2018:1738-1 |
| SLES 12 SP2 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-2, SUSE-SU-2018:1764-1 |
| SLES 12 SP2 | java-1_8_0-ibm | 1.8.0_sr5.15-30.33.1 | SUSE-SU-2018:1738-2, SUSE-SU-2018:1738-1 |
| SLES 12 SP1 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-1 |
| SLES 12 SP1 | java-1_8_0-ibm | 1.8.0_sr5.15-30.33.1 | SUSE-SU-2018:1738-1 |
| SLES 12 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP4 | java-1_7_1-ibm | 1.7.1_sr4.25-26.26.1 | SUSE-SU-2018:1447-1 |
| SLES 11 SP3 | java-1_7_0-ibm | 1.7.0_sr10.25-65.25.1 | SUSE-SU-2018:1458-1 |
| SLES for SAP 12 SP3 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-1 |
| SLES for SAP 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.15-30.33.1 | SUSE-SU-2018:1738-1 |
| SLES for SAP 12 SP2 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-1 |
| SLES for SAP 12 SP2 | java-1_8_0-ibm | 1.8.0_sr5.15-30.33.1 | SUSE-SU-2018:1738-1 |
| SLES for SAP 12 SP1 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-1 |
| SLES for SAP 12 SP1 | java-1_8_0-ibm | 1.8.0_sr5.15-30.33.1 | SUSE-SU-2018:1738-1 |
| SLES for SAP 11 SP4 | java-1_7_1-ibm | 1.7.1_sr4.25-26.26.1 | SUSE-SU-2018:1447-1 |
| SUSE OpenStack Cloud 7 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-ibm | 1.8.0_sr5.15-30.33.1 | SUSE-SU-2018:1738-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | java-1_7_0-ibm | 1.7.0_sr10.25-65.25.1 | SUSE-SU-2018:1458-1 |
| SUSE Enterprise Storage 4 | java-1_7_1-ibm | 1.7.1_sr4.25-38.23.1 | SUSE-SU-2018:1764-1 |
| SUSE Enterprise Storage 4 | java-1_8_0-ibm | 1.8.0_sr5.15-30.33.1 | SUSE-SU-2018:1738-1 |
Advisories 12
- RHSA-2018:1463 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:0521 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:0458 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:0352 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:0351 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- SUSE-SU-2018:1764-2 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1447-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1738-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1738-2 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1764-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2068-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1458-1 Security update for java-1_7_0-ibm SUSE / openSUSE Security Updates · May 2, 2025