RHSA-2018:2713MediumCVSS 8.4

Red Hat Security Advisory: java-1.8.0-ibm security update

Published
September 17, 2018
Last Modified
November 5, 2026

🔗 CVE IDs covered (9)

CVE-2017-3732 →CVE-2018-1517 →CVE-2018-1656 →CVE-2018-2940 →CVE-2016-0705 →CVE-2017-3736 →CVE-2018-2952 →CVE-2018-2973 →CVE-2018-12539 →

📋 Description

CVE-2016-0705 — OpenSSL: Double-free in DSA code CVE-2017-3732 — openssl: BN_mod_exp may produce incorrect results on x86_64 CVE-2017-3736 — openssl: bn_sqrx8x_internal carry bug on x86_64 CVE-2018-1517 — JDK: DoS in the java.math component CVE-2018-1656 — JDK: path traversal flaw in the Diagnostic Tooling Framework CVE-2018-2940 — JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) CVE-2018-2952 — OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) CVE-2018-2973 — JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) CVE-2018-12539 — JDK: privilege escalation via insufficiently restricted access to Attach API

🎯 Affected products5

  • Red Hat Satellite 5.8 (RHEL v.6)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)
  • java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)
  • java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For this update to take effect, Red Hat Satellite must be restarted ("/usr/sbin/rhn-satellite restart"). All running instances of IBM Java must be restarted for this update to take effect.

🔗 References (12)