Red Hat Security Advisory: java-1.7.1-ibm security update
🔗 CVE IDs covered (11)
📋 Description
CVE-2015-5041 — JDK: J9 JVM allows code to invoke non-public interface methods CVE-2015-7575 — TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) CVE-2015-7981 — libpng: Out-of-bounds read in png_convert_to_rfc1123 CVE-2015-8126 — libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions CVE-2015-8472 — libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions CVE-2015-8540 — libpng: underflow read in png_check_keyword() CVE-2016-0402 — OpenJDK: URL deserialization inconsistencies (Networking, 8059054) CVE-2016-0448 — OpenJDK: logging of RMI connection secrets (JMX, 8130710) CVE-2016-0466 — OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) CVE-2016-0483 — OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) CVE-2016-0494 — ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)
🎯 Affected products108
- Red Hat Enterprise Linux Client Supplementary (v. 7)
- Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux Server Supplementary (v. 7)
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- Red Hat Enterprise Linux Workstation Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.i686 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.ppc as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.s390 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- +78 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (14)
- selfhttps://access.redhat.com/errata/RHSA-2016:0099
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttp://www.ibm.com/developerworks/java/jdk/alerts/
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1276416
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1281756
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1289841
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1291312
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1298906
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1298957
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1299073
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1299385
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1299441
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1302689
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0099.json