RHSA-2018:2568HighCVSS 8.4

Red Hat Security Advisory: java-1.8.0-ibm security update

Published
August 27, 2018
Last Modified
November 5, 2026

🔗 CVE IDs covered (9)

CVE-2016-0705 →CVE-2017-3732 →CVE-2017-3736 →CVE-2018-1656 →CVE-2018-2940 →CVE-2018-12539 →CVE-2018-1517 →CVE-2018-2952 →CVE-2018-2973 →

📋 Description

CVE-2016-0705 — OpenSSL: Double-free in DSA code CVE-2017-3732 — openssl: BN_mod_exp may produce incorrect results on x86_64 CVE-2017-3736 — openssl: bn_sqrx8x_internal carry bug on x86_64 CVE-2018-1517 — JDK: DoS in the java.math component CVE-2018-1656 — JDK: path traversal flaw in the Diagnostic Tooling Framework CVE-2018-2940 — JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) CVE-2018-2952 — OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) CVE-2018-2973 — JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) CVE-2018-12539 — JDK: privilege escalation via insufficiently restricted access to Attach API

🎯 Affected products42

  • Red Hat Enterprise Linux Client Supplementary (v. 7)
  • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
  • Red Hat Enterprise Linux Server Supplementary (v. 7)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 7)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)
  • java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)
  • java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
  • java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)
  • java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)
  • java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • +12 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of IBM Java must be restarted for this update to take effect.

🔗 References (12)