Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-9842
Vulnerability from cvelistv5
Published
2017-05-23 03:56
Modified
2024-08-06 02:59
Severity ?
EPSS score ?
Summary
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T02:59:03.495Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "RHSA-2017:1221", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "name": "RHSA-2017:1220", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "name": "RHSA-2017:3047", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21" }, { "name": "95131", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/95131" }, { "name": "RHSA-2017:3046", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "name": "openSUSE-SU-2017:0077", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" }, { "name": "GLSA-201701-56", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/201701-56" }, { "name": "1039427", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1039427" }, { "name": "RHSA-2017:1222", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "name": "openSUSE-SU-2017:0080", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" }, { "name": "RHSA-2017:3453", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "name": "openSUSE-SU-2016:3202", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" }, { "name": "RHSA-2017:2999", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html" }, { "name": "USN-4246-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/4246-1/" }, { "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html" }, { "name": "USN-4292-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/4292-1/" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpujul2020.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208144" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208113" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208112" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208115" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958" }, { "name": "GLSA-202007-54", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/202007-54" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2016-09-30T00:00:00", "descriptions": [ { "lang": "en", "value": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-01-06T16:16:04", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus" }, "references": [ { "name": "RHSA-2017:1221", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "name": "RHSA-2017:1220", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "name": "RHSA-2017:3047", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21" }, { "name": "95131", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/95131" }, { "name": "RHSA-2017:3046", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "name": "openSUSE-SU-2017:0077", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" }, { "name": "GLSA-201701-56", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/201701-56" }, { "name": "1039427", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1039427" }, { "name": "RHSA-2017:1222", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "name": "openSUSE-SU-2017:0080", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" }, { "name": "RHSA-2017:3453", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "name": "openSUSE-SU-2016:3202", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" }, { "name": "RHSA-2017:2999", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html" }, { "name": "USN-4246-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/4246-1/" }, { "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html" }, { "name": "USN-4292-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/4292-1/" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.oracle.com/security-alerts/cpujul2020.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208144" }, { "tags": [ "x_refsource_MISC" ], "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208113" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208112" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208115" }, { "tags": [ "x_refsource_MISC" ], "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958" }, { "name": "GLSA-202007-54", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/202007-54" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "security@microfocus.com", "ID": "CVE-2016-9842", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2017:1221", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "name": "RHSA-2017:1220", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "name": "RHSA-2017:3047", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21" }, { "name": "95131", "refsource": "BID", "url": "http://www.securityfocus.com/bid/95131" }, { "name": "RHSA-2017:3046", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "name": "openSUSE-SU-2017:0077", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" }, { "name": "GLSA-201701-56", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201701-56" }, { "name": "1039427", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039427" }, { "name": "RHSA-2017:1222", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "name": "openSUSE-SU-2017:0080", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" }, { "name": "RHSA-2017:3453", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "name": "openSUSE-SU-2016:3202", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" }, { "name": "RHSA-2017:2999", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html" }, { "name": "USN-4246-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4246-1/" }, { "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html" }, { "name": "USN-4292-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4292-1/" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html" }, { "name": "https://www.oracle.com/security-alerts/cpujul2020.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujul2020.html" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" }, { "name": "https://support.apple.com/HT208144", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208144" }, { "name": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib", "refsource": "MISC", "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib" }, { "name": "https://support.apple.com/HT208113", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208113" }, { "name": "https://support.apple.com/HT208112", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208112" }, { "name": "https://support.apple.com/HT208115", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208115" }, { "name": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "refsource": "MISC", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "name": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958", "refsource": "CONFIRM", "url": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958" }, { "name": "GLSA-202007-54", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202007-54" } ] } } } }, "cveMetadata": { "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2016-9842", "datePublished": "2017-05-23T03:56:00", "dateReserved": "2016-12-05T00:00:00", "dateUpdated": "2024-08-06T02:59:03.495Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2016-9842\",\"sourceIdentifier\":\"security@opentext.com\",\"published\":\"2017-05-23T04:29:01.837\",\"lastModified\":\"2024-11-21T03:01:51.370\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n inflateMark en inflate.c en zlib 1.2.8 podr\u00eda permitir que los atacantes dependientes del contexto tener un impacto no especificado a trav\u00e9s de vectores que implican cambios a la izquierda de enteros negativos.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.2.3.4\",\"versionEndExcluding\":\"1.2.9\",\"matchCriteriaId\":\"018FE9CE-4D44-4A7D-90DB-A2B1953B5B7F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4863BE36-D16A-4D75-90D9-FD76DB5B48B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"B3293E55-5506-4587-A318-D1734F781C09\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6833701E-5510-4180-9523-9CFD318DEE6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*\",\"matchCriteriaId\":\"7037AEF9-403D-43EC-ABBB-B46619241586\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*\",\"matchCriteriaId\":\"B781F1F7-DE18-41F7-83C1-8690B0884DDE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D36F2A6-1329-4D74-BADC-C22D46CF7CFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*\",\"matchCriteriaId\":\"D53D6C3C-C8F3-4FF4-AE9C-1BFF14E74EDE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*\",\"matchCriteriaId\":\"71219100-B476-4062-A40A-13F1B8C7DAED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCC055BA-0D21-4D2B-AC9B-B81B8468860C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5.0\",\"versionEndIncluding\":\"5.5.61\",\"matchCriteriaId\":\"F370B9CC-03AA-436B-AF81-1FD48F33BAEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.6.0\",\"versionEndIncluding\":\"5.6.41\",\"matchCriteriaId\":\"9A2BAC98-4BC4-44EB-AE09-826BD21D5E3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.7.0\",\"versionEndIncluding\":\"5.7.23\",\"matchCriteriaId\":\"76702038-5D38-450F-BA25-FED83FBE758B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndIncluding\":\"8.0.12\",\"matchCriteriaId\":\"106FA614-55B8-4D90-B654-47EE199E7CC1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F96E3779-F56A-45FF-BB3D-4980527D721E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11\",\"matchCriteriaId\":\"F72F611A-26E5-4CC7-888E-96AD158D7C68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndExcluding\":\"10.13.0\",\"matchCriteriaId\":\"66F7B69D-5362-4E15-9FFE-8F3E87738920\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.0\",\"matchCriteriaId\":\"11895153-2FE5-4D73-B7FC-182FA280BA36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4\",\"matchCriteriaId\":\"49790D15-2446-4138-B1FA-6C806587C5A1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndIncluding\":\"4.1.2\",\"matchCriteriaId\":\"A47FC4F7-1F77-4314-B4B3-3C5D8E335379\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"4.2.0\",\"versionEndExcluding\":\"4.8.2\",\"matchCriteriaId\":\"BCA5DE0E-A10C-42A1-BFE3-1FED2C3171AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndIncluding\":\"6.8.1\",\"matchCriteriaId\":\"D107EC29-67E7-40C3-8E5A-324C9105C5E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"6.9.0\",\"versionEndExcluding\":\"6.10.2\",\"matchCriteriaId\":\"ED1F2BAC-47F9-49C9-93FE-20EDD46CDF86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.6.0\",\"matchCriteriaId\":\"7F49B5A3-6516-46A2-884B-4D6657C188AE\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/12/05/21\",\"source\":\"security@opentext.com\",\"tags\":[\"Mailing List\",\"Patch\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95131\",\"source\":\"security@opentext.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039427\",\"source\":\"security@opentext.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1220\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1221\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1222\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2999\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3046\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3047\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3453\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1402348\",\"source\":\"security@opentext.com\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958\",\"source\":\"security@opentext.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201701-56\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202007-54\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208112\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208113\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208115\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208144\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4246-1/\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4292-1/\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://wiki.mozilla.org/images/0/09/Zlib-report.pdf\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"security@opentext.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/12/05/21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Patch\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95131\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039427\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1220\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1221\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1222\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2999\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3046\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3047\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:3453\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1402348\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201701-56\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202007-54\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208112\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208113\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208115\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208144\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4246-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4292-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://wiki.mozilla.org/images/0/09/Zlib-report.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
rhsa-2017_3453
Vulnerability from csaf_redhat
Published
2017-12-13 16:48
Modified
2024-12-08 10:54
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8 and Red Hat Satellite 5.8 ELS.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM
Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP5.
Security Fix(es):
* This update fixes multiple vulnerabilities in the IBM Java Runtime
Environment and the IBM Java Software Development Kit. Further information
about these flaws can be found on the IBM Java Security Vulnerabilities
page listed in the References section. (CVE-2016-9840, CVE-2016-9841,
CVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-1289, CVE-2017-3509,
CVE-2017-3511, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544, CVE-2017-10053,
CVE-2017-10067, CVE-2017-10078, CVE-2017-10087, CVE-2017-10089,
CVE-2017-10090, CVE-2017-10096, CVE-2017-10101, CVE-2017-10102,
CVE-2017-10105, CVE-2017-10107, CVE-2017-10108, CVE-2017-10109,
CVE-2017-10110, CVE-2017-10115, CVE-2017-10116, CVE-2017-10243,
CVE-2017-10281, CVE-2017-10285, CVE-2017-10295, CVE-2017-10309,
CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348,
CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356,
CVE-2017-10357, CVE-2017-10388)
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
For this update to take effect, Red Hat Satellite must be restarted
("/usr/sbin/rhn-satellite restart"). All running instances of IBM Java must
be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8 and Red Hat Satellite 5.8 ELS.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM\nJava Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP5.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the IBM Java Runtime\nEnvironment and the IBM Java Software Development Kit. Further information\nabout these flaws can be found on the IBM Java Security Vulnerabilities\npage listed in the References section. (CVE-2016-9840, CVE-2016-9841,\nCVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-1289, CVE-2017-3509,\nCVE-2017-3511, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544, CVE-2017-10053,\nCVE-2017-10067, CVE-2017-10078, CVE-2017-10087, CVE-2017-10089,\nCVE-2017-10090, CVE-2017-10096, CVE-2017-10101, CVE-2017-10102,\nCVE-2017-10105, CVE-2017-10107, CVE-2017-10108, CVE-2017-10109,\nCVE-2017-10110, CVE-2017-10115, CVE-2017-10116, CVE-2017-10243,\nCVE-2017-10281, CVE-2017-10285, CVE-2017-10295, CVE-2017-10309,\nCVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348,\nCVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356,\nCVE-2017-10357, CVE-2017-10388)\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted\n(\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must\nbe restarted for this update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:3453", "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1367357", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367357" }, { "category": "external", "summary": "1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "1443007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443007" }, { "category": "external", "summary": "1443052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443052" }, { "category": "external", "summary": "1443068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443068" }, { "category": "external", "summary": "1443083", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443083" }, { "category": "external", "summary": "1443097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443097" }, { "category": "external", "summary": "1449603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449603" }, { "category": "external", "summary": "1471266", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471266" }, { "category": "external", "summary": "1471270", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471270" }, { "category": "external", "summary": "1471517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471517" }, { "category": "external", "summary": "1471521", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471521" }, { "category": "external", "summary": "1471523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471523" }, { "category": "external", "summary": "1471527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471527" }, { "category": "external", "summary": "1471528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471528" }, { "category": "external", "summary": "1471535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471535" }, { "category": "external", "summary": "1471670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471670" }, { "category": "external", "summary": "1471738", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471738" }, { "category": "external", "summary": "1471851", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471851" }, { "category": "external", "summary": "1471888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471888" }, { "category": "external", "summary": "1471889", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471889" }, { "category": "external", "summary": "1471898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471898" }, { "category": "external", "summary": "1472345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472345" }, { "category": "external", "summary": "1472666", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472666" }, { "category": "external", "summary": "1472667", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472667" }, { "category": "external", "summary": "1501868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868" }, { "category": "external", "summary": "1501873", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873" }, { "category": "external", "summary": "1502038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038" }, { "category": "external", "summary": "1502611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611" }, { "category": "external", "summary": "1502614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614" }, { "category": "external", "summary": "1502629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629" }, { "category": "external", "summary": "1502632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632" }, { "category": "external", "summary": "1502640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502640" }, { "category": "external", "summary": "1502649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649" }, { "category": "external", "summary": "1502687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687" }, { "category": "external", "summary": "1502858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858" }, { "category": "external", "summary": "1502869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869" }, { "category": "external", "summary": "1503169", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169" }, { "category": "external", "summary": "1503319", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503319" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3453.json" } ], "title": "Red Hat Security Advisory: java-1.8.0-ibm security update", "tracking": { "current_release_date": "2024-12-08T10:54:44+00:00", "generator": { "date": "2024-12-08T10:54:44+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2017:3453", "initial_release_date": "2017-12-13T16:48:15+00:00", "revision_history": [ { "date": "2017-12-13T16:48:15+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-12-13T16:48:15+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-08T10:54:44+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Satellite 5.8 (RHEL v.6)", "product": { "name": "Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58", "product_identification_helper": { "cpe": "cpe:/a:redhat:network_satellite:5.8::el6" } } }, { "category": "product_name", "name": "Red Hat Satellite 5.8 ELS (RHEL v.6)", "product": { "name": "Red Hat Satellite 5.8 ELS (RHEL v.6)", "product_id": "6Server-Satellite58-ELS", "product_identification_helper": { "cpe": "cpe:/a:redhat:network_satellite:5.8::el6" } } } ], "category": "product_family", "name": "Red Hat Satellite" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.5-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.5-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "product_id": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.5-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.5-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "product_id": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.5-1jpp.1.el6_9?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x as a component of Red Hat Satellite 5.8 ELS (RHEL v.6)", "product_id": "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Satellite58-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src as a component of Red Hat Satellite 5.8 ELS (RHEL v.6)", "product_id": "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "relates_to_product_reference": "6Server-Satellite58-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Satellite 5.8 ELS (RHEL v.6)", "product_id": "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Satellite58-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x as a component of Red Hat Satellite 5.8 ELS (RHEL v.6)", "product_id": "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Satellite58-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Satellite 5.8 ELS (RHEL v.6)", "product_id": "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Satellite58-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Satellite58" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "relates_to_product_reference": "6Server-Satellite58" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Satellite58" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Satellite58" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Satellite58" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402345" } ], "notes": [ { "category": "description", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inftrees.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9840" }, { "category": "external", "summary": "RHBZ#1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9840" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inftrees.c" }, { "cve": "CVE-2016-9841", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402346" } ], "notes": [ { "category": "description", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inffast.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9841" }, { "category": "external", "summary": "RHBZ#1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9841", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9841" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inffast.c" }, { "cve": "CVE-2016-9842", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402348" } ], "notes": [ { "category": "description", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Undefined left shift of negative number", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9842" }, { "category": "external", "summary": "RHBZ#1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9842", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9842" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Undefined left shift of negative number" }, { "cve": "CVE-2016-9843", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402351" } ], "notes": [ { "category": "description", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Big-endian out-of-bounds pointer", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9843" }, { "category": "external", "summary": "RHBZ#1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9843", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Big-endian out-of-bounds pointer" }, { "cve": "CVE-2016-10165", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2016-08-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1367357" } ], "notes": [ { "category": "description", "text": "The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.", "title": "Vulnerability description" }, { "category": "summary", "text": "lcms2: Out-of-bounds read in Type_MLU_Read()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-10165" }, { "category": "external", "summary": "RHBZ#1367357", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367357" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-10165", "url": "https://www.cve.org/CVERecord?id=CVE-2016-10165" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-10165", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10165" } ], "release_date": "2016-08-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "lcms2: Out-of-bounds read in Type_MLU_Read()" }, { "cve": "CVE-2017-1289", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2017-05-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1449603" } ], "notes": [ { "category": "description", "text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: XML External Entity Injection (XXE) error when processing XML data", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-1289" }, { "category": "external", "summary": "RHBZ#1449603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449603" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1289", "url": "https://www.cve.org/CVERecord?id=CVE-2017-1289" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1289", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1289" } ], "release_date": "2017-05-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: XML External Entity Injection (XXE) error when processing XML data" }, { "cve": "CVE-2017-3509", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443052" } ], "notes": [ { "category": "description", "text": "It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with credentials of a different user.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3509" }, { "category": "external", "summary": "RHBZ#1443052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443052" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3509", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3509" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3509", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3509" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)" }, { "cve": "CVE-2017-3511", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443007" } ], "notes": [ { "category": "description", "text": "An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3511" }, { "category": "external", "summary": "RHBZ#1443007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443007" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3511", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3511" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)" }, { "cve": "CVE-2017-3533", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-02-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443083" } ], "notes": [ { "category": "description", "text": "A newline injection flaw was discovered in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: newline injection in the FTP client (Networking, 8170222)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3533" }, { "category": "external", "summary": "RHBZ#1443083", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443083" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3533", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3533" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3533", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3533" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-02-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: newline injection in the FTP client (Networking, 8170222)" }, { "cve": "CVE-2017-3539", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443097" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK did not allow users to restrict the set of algorithms allowed for Jar integrity verification. This flaw could allow an attacker to modify content of the Jar file that used weak signing key or hash algorithm.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: MD5 allowed for jar verification (Security, 8171121)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3539" }, { "category": "external", "summary": "RHBZ#1443097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3539", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3539" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3539", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3539" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: MD5 allowed for jar verification (Security, 8171121)" }, { "cve": "CVE-2017-3544", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443068" } ], "notes": [ { "category": "description", "text": "A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: newline injection in the SMTP client (Networking, 8171533)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3544" }, { "category": "external", "summary": "RHBZ#1443068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443068" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3544", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3544" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: newline injection in the SMTP client (Networking, 8171533)" }, { "cve": "CVE-2017-10053", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471889" } ], "notes": [ { "category": "description", "text": "It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10053" }, { "category": "external", "summary": "RHBZ#1471889", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471889" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10053", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10053" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10053", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10053" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)" }, { "cve": "CVE-2017-10067", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471535" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10067" }, { "category": "external", "summary": "RHBZ#1471535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471535" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10067", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10067" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10067", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10067" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)" }, { "cve": "CVE-2017-10078", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471898" } ], "notes": [ { "category": "description", "text": "It was discovered that the Nashorn JavaScript engine in the Scripting component of OpenJDK could allow scripts to access Java APIs even when access to Java APIs was disabled. An untrusted JavaScript executed by Nashorn could use this flaw to bypass intended restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10078" }, { "category": "external", "summary": "RHBZ#1471898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471898" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10078", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10078" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10078" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)" }, { "cve": "CVE-2017-10087", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471521" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10087" }, { "category": "external", "summary": "RHBZ#1471521", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471521" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10087" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)" }, { "cve": "CVE-2017-10089", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471270" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10089" }, { "category": "external", "summary": "RHBZ#1471270", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471270" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10089", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10089" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10089", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10089" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)" }, { "cve": "CVE-2017-10090", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471517" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10090" }, { "category": "external", "summary": "RHBZ#1471517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471517" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10090", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10090" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10090", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10090" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)" }, { "cve": "CVE-2017-10096", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471528" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10096" }, { "category": "external", "summary": "RHBZ#1471528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471528" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10096", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10096" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10096", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10096" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)" }, { "cve": "CVE-2017-10101", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471527" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10101" }, { "category": "external", "summary": "RHBZ#1471527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471527" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10101", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10101" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10101", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10101" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)" }, { "cve": "CVE-2017-10102", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472345" } ], "notes": [ { "category": "description", "text": "It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect handling of references in DGC (RMI, 8163958)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10102" }, { "category": "external", "summary": "RHBZ#1472345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10102", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10102" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10102", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10102" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect handling of references in DGC (RMI, 8163958)" }, { "cve": "CVE-2017-10105", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472667" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10105" }, { "category": "external", "summary": "RHBZ#1472667", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472667" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10105", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10105" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10105", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10105" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)" }, { "cve": "CVE-2017-10107", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471266" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10107" }, { "category": "external", "summary": "RHBZ#1471266", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471266" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10107", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10107" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10107", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10107" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)" }, { "cve": "CVE-2017-10108", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471888" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10108" }, { "category": "external", "summary": "RHBZ#1471888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471888" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10108", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10108" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10108", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10108" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)" }, { "cve": "CVE-2017-10109", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471670" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10109" }, { "category": "external", "summary": "RHBZ#1471670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471670" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10109", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10109" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10109", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10109" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)" }, { "cve": "CVE-2017-10110", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471523" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10110" }, { "category": "external", "summary": "RHBZ#1471523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471523" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10110", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10110" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10110", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10110" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)" }, { "cve": "CVE-2017-10115", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471851" } ], "notes": [ { "category": "description", "text": "A covert timing channel flaw was found in the DSA implementation in the JCE component of OpenJDK. A remote attacker able to make a Java application generate DSA signatures on demand could possibly use this flaw to extract certain information about the used key via a timing side channel.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: DSA implementation timing attack (JCE, 8175106)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10115" }, { "category": "external", "summary": "RHBZ#1471851", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471851" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10115", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10115" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10115", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10115" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: DSA implementation timing attack (JCE, 8175106)" }, { "cve": "CVE-2017-10116", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471738" } ], "notes": [ { "category": "description", "text": "It was discovered that the LDAPCertStore class in the Security component of OpenJDK followed LDAP referrals to arbitrary URLs. A specially crafted LDAP referral URL could cause LDAPCertStore to communicate with non-LDAP servers.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10116" }, { "category": "external", "summary": "RHBZ#1471738", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471738" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10116", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10116" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10116", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10116" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)" }, { "cve": "CVE-2017-10243", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472666" } ], "notes": [ { "category": "description", "text": "It was discovered that the wsdlimport tool in the JAX-WS component of OpenJDK did not use secure XML parser settings when parsing WSDL XML documents. A specially crafted WSDL document could cause wsdlimport to use an excessive amount of CPU and memory, open connections to other hosts, or leak information.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10243" }, { "category": "external", "summary": "RHBZ#1472666", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472666" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10243", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10243" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10243", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10243" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)" }, { "cve": "CVE-2017-10281", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502649" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10281" }, { "category": "external", "summary": "RHBZ#1502649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10281", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10281" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)" }, { "cve": "CVE-2017-10285", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1501868" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10285" }, { "category": "external", "summary": "RHBZ#1501868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10285", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10285" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)" }, { "cve": "CVE-2017-10295", "cwe": { "id": "CWE-113", "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502687" } ], "notes": [ { "category": "description", "text": "It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additional headers into the request.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10295" }, { "category": "external", "summary": "RHBZ#1502687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10295", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10295" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)" }, { "cve": "CVE-2017-10309", "discovery_date": "2017-10-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503319" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10309" }, { "category": "external", "summary": "RHBZ#1503319", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503319" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10309", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10309" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10309", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10309" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)" }, { "cve": "CVE-2017-10345", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502858" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10345" }, { "category": "external", "summary": "RHBZ#1502858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10345", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10345" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)" }, { "cve": "CVE-2017-10346", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1501873" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10346" }, { "category": "external", "summary": "RHBZ#1501873", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10346", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)" }, { "cve": "CVE-2017-10347", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502632" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10347" }, { "category": "external", "summary": "RHBZ#1502632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10347", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10347" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)" }, { "cve": "CVE-2017-10348", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502629" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10348" }, { "category": "external", "summary": "RHBZ#1502629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10348", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10348" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)" }, { "cve": "CVE-2017-10349", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502611" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10349" }, { "category": "external", "summary": "RHBZ#1502611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10349", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10349" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)" }, { "cve": "CVE-2017-10350", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502640" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10350" }, { "category": "external", "summary": "RHBZ#1502640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502640" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10350", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10350" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10350", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10350" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)" }, { "cve": "CVE-2017-10355", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502869" } ], "notes": [ { "category": "description", "text": "It was found that the FtpClient implementation in the Networking component of OpenJDK did not set connect and read timeouts by default. A malicious FTP server or a man-in-the-middle attacker could use this flaw to block execution of a Java application connecting to an FTP server.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10355" }, { "category": "external", "summary": "RHBZ#1502869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10355", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10355" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)" }, { "cve": "CVE-2017-10356", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503169" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10356" }, { "category": "external", "summary": "RHBZ#1503169", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10356", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10356" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)" }, { "cve": "CVE-2017-10357", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502614" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10357" }, { "category": "external", "summary": "RHBZ#1502614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10357", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10357" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)" }, { "cve": "CVE-2017-10388", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502038" } ], "notes": [ { "category": "description", "text": "It was discovered that the Kerberos client implementation in the Libraries component of OpenJDK used the sname field from the plain text part rather than encrypted part of the KDC reply message. A man-in-the-middle attacker could possibly use this flaw to impersonate Kerberos services to Java applications acting as Kerberos clients.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10388" }, { "category": "external", "summary": "RHBZ#1502038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10388", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10388" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-12-13T16:48:15+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3453" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58-ELS:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58-ELS:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.src", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)" } ] }
rhsa-2017_1220
Vulnerability from csaf_redhat
Published
2017-05-10 12:44
Modified
2024-11-14 22:39
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR4-FP5.
Security Fix(es):
* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security Vulnerabilities page, listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-1289, CVE-2017-3509, CVE-2017-3511, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR4-FP5.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security Vulnerabilities page, listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-1289, CVE-2017-3509, CVE-2017-3511, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1220", "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://developer.ibm.com/javasdk/support/security-vulnerabilities/", "url": "https://developer.ibm.com/javasdk/support/security-vulnerabilities/" }, { "category": "external", "summary": "1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "1443007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443007" }, { "category": "external", "summary": "1443052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443052" }, { "category": "external", "summary": "1443068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443068" }, { "category": "external", "summary": "1443083", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443083" }, { "category": "external", "summary": "1443097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443097" }, { "category": "external", "summary": "1449603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449603" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1220.json" } ], "title": "Red Hat Security Advisory: java-1.8.0-ibm security update", "tracking": { "current_release_date": "2024-11-14T22:39:44+00:00", "generator": { "date": "2024-11-14T22:39:44+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:1220", "initial_release_date": "2017-05-10T12:44:34+00:00", "revision_history": [ { "date": "2017-05-10T12:44:34+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-05-10T12:44:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T22:39:44+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.4.5-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.4.5-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.4.5-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.4.5-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.4.5-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.4.5-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.4.5-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.4.5-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.4.5-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.4.5-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_id": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.4.5-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el7_3?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el7_3?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el7_3?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el7_3?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.4.5-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.4.5-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_id": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.4.5-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402345" } ], "notes": [ { "category": "description", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inftrees.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9840" }, { "category": "external", "summary": "RHBZ#1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9840" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inftrees.c" }, { "cve": "CVE-2016-9841", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402346" } ], "notes": [ { "category": "description", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inffast.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9841" }, { "category": "external", "summary": "RHBZ#1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9841", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9841" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inffast.c" }, { "cve": "CVE-2016-9842", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402348" } ], "notes": [ { "category": "description", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Undefined left shift of negative number", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9842" }, { "category": "external", "summary": "RHBZ#1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9842", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9842" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Undefined left shift of negative number" }, { "cve": "CVE-2016-9843", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402351" } ], "notes": [ { "category": "description", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Big-endian out-of-bounds pointer", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9843" }, { "category": "external", "summary": "RHBZ#1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9843", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Big-endian out-of-bounds pointer" }, { "cve": "CVE-2017-1289", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2017-05-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1449603" } ], "notes": [ { "category": "description", "text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: XML External Entity Injection (XXE) error when processing XML data", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-1289" }, { "category": "external", "summary": "RHBZ#1449603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449603" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1289", "url": "https://www.cve.org/CVERecord?id=CVE-2017-1289" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1289", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1289" } ], "release_date": "2017-05-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: XML External Entity Injection (XXE) error when processing XML data" }, { "cve": "CVE-2017-3509", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443052" } ], "notes": [ { "category": "description", "text": "It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with credentials of a different user.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3509" }, { "category": "external", "summary": "RHBZ#1443052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443052" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3509", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3509" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3509", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3509" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)" }, { "cve": "CVE-2017-3511", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443007" } ], "notes": [ { "category": "description", "text": "An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3511" }, { "category": "external", "summary": "RHBZ#1443007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443007" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3511", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3511" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)" }, { "cve": "CVE-2017-3533", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-02-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443083" } ], "notes": [ { "category": "description", "text": "A newline injection flaw was discovered in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: newline injection in the FTP client (Networking, 8170222)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3533" }, { "category": "external", "summary": "RHBZ#1443083", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443083" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3533", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3533" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3533", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3533" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-02-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: newline injection in the FTP client (Networking, 8170222)" }, { "cve": "CVE-2017-3539", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443097" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK did not allow users to restrict the set of algorithms allowed for Jar integrity verification. This flaw could allow an attacker to modify content of the Jar file that used weak signing key or hash algorithm.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: MD5 allowed for jar verification (Security, 8171121)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3539" }, { "category": "external", "summary": "RHBZ#1443097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3539", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3539" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3539", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3539" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: MD5 allowed for jar verification (Security, 8171121)" }, { "cve": "CVE-2017-3544", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443068" } ], "notes": [ { "category": "description", "text": "A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: newline injection in the SMTP client (Networking, 8171533)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3544" }, { "category": "external", "summary": "RHBZ#1443068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443068" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3544", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3544" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1220" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: newline injection in the SMTP client (Networking, 8171533)" } ] }
rhsa-2017_1221
Vulnerability from csaf_redhat
Published
2017-05-10 12:44
Modified
2024-11-14 22:39
Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP5.
Security Fix(es):
* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security Vulnerabilities page, listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-1289, CVE-2017-3509, CVE-2017-3511, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP5.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security Vulnerabilities page, listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-1289, CVE-2017-3509, CVE-2017-3511, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1221", "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://developer.ibm.com/javasdk/support/security-vulnerabilities/", "url": "https://developer.ibm.com/javasdk/support/security-vulnerabilities/" }, { "category": "external", "summary": "1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "1443007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443007" }, { "category": "external", "summary": "1443052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443052" }, { "category": "external", "summary": "1443068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443068" }, { "category": "external", "summary": "1443083", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443083" }, { "category": "external", "summary": "1443097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443097" }, { "category": "external", "summary": "1449603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449603" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1221.json" } ], "title": "Red Hat Security Advisory: java-1.7.1-ibm security update", "tracking": { "current_release_date": "2024-11-14T22:39:51+00:00", "generator": { "date": "2024-11-14T22:39:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:1221", "initial_release_date": "2017-05-10T12:44:04+00:00", "revision_history": [ { "date": "2017-05-10T12:44:04+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-05-10T12:44:04+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T22:39:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.5-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.5-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.5-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.5-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.1.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.1.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.5-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.5-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.5-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.5-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.1.el7_3?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.5-1jpp.1.el7_3?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.1.el7_3?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.5-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.5-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.5-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.1.el7_3?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.1.el7_3?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.1.el7_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.5-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.5-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.5-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_id": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.5-1jpp.1.el7_3?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-7.3.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-7.3.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-7.3.Z-Workstation" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402345" } ], "notes": [ { "category": "description", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inftrees.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9840" }, { "category": "external", "summary": "RHBZ#1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9840" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inftrees.c" }, { "cve": "CVE-2016-9841", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402346" } ], "notes": [ { "category": "description", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inffast.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9841" }, { "category": "external", "summary": "RHBZ#1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9841", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9841" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inffast.c" }, { "cve": "CVE-2016-9842", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402348" } ], "notes": [ { "category": "description", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Undefined left shift of negative number", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9842" }, { "category": "external", "summary": "RHBZ#1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9842", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9842" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Undefined left shift of negative number" }, { "cve": "CVE-2016-9843", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402351" } ], "notes": [ { "category": "description", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Big-endian out-of-bounds pointer", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9843" }, { "category": "external", "summary": "RHBZ#1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9843", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Big-endian out-of-bounds pointer" }, { "cve": "CVE-2017-1289", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2017-05-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1449603" } ], "notes": [ { "category": "description", "text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: XML External Entity Injection (XXE) error when processing XML data", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-1289" }, { "category": "external", "summary": "RHBZ#1449603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449603" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1289", "url": "https://www.cve.org/CVERecord?id=CVE-2017-1289" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1289", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1289" } ], "release_date": "2017-05-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: XML External Entity Injection (XXE) error when processing XML data" }, { "cve": "CVE-2017-3509", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443052" } ], "notes": [ { "category": "description", "text": "It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with credentials of a different user.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3509" }, { "category": "external", "summary": "RHBZ#1443052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443052" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3509", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3509" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3509", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3509" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)" }, { "cve": "CVE-2017-3511", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443007" } ], "notes": [ { "category": "description", "text": "An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3511" }, { "category": "external", "summary": "RHBZ#1443007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443007" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3511", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3511" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)" }, { "cve": "CVE-2017-3533", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-02-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443083" } ], "notes": [ { "category": "description", "text": "A newline injection flaw was discovered in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: newline injection in the FTP client (Networking, 8170222)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3533" }, { "category": "external", "summary": "RHBZ#1443083", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443083" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3533", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3533" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3533", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3533" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-02-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: newline injection in the FTP client (Networking, 8170222)" }, { "cve": "CVE-2017-3539", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443097" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK did not allow users to restrict the set of algorithms allowed for Jar integrity verification. This flaw could allow an attacker to modify content of the Jar file that used weak signing key or hash algorithm.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: MD5 allowed for jar verification (Security, 8171121)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3539" }, { "category": "external", "summary": "RHBZ#1443097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3539", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3539" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3539", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3539" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: MD5 allowed for jar verification (Security, 8171121)" }, { "cve": "CVE-2017-3544", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443068" } ], "notes": [ { "category": "description", "text": "A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: newline injection in the SMTP client (Networking, 8171533)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3544" }, { "category": "external", "summary": "RHBZ#1443068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443068" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3544", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3544" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:44:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.2.el6_9.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Client-7.3.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Client-7.3.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7ComputeNode-7.3.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Server-7.3.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Server-7.3.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.i686", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.ppc", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.5-1jpp.1.el7_3.x86_64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.ppc64le", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.s390x", "7Workstation-7.3.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.5-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: newline injection in the SMTP client (Networking, 8171533)" } ] }
rhsa-2017_3047
Vulnerability from csaf_redhat
Published
2017-10-24 12:09
Modified
2024-11-14 21:45
Summary
Red Hat Security Advisory: java-1.6.0-sun security update
Notes
Topic
An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 6 to version 6 Update 171.
Security Fix(es):
* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-10274, CVE-2017-10281, CVE-2017-10285, CVE-2017-10293, CVE-2017-10295, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)
Note: Starting with this update, Java web browser plugin and Java Web Start application are no longer included with Oracle Java SE 6. Refer to the Releases Notes and the Oracle Java SE Support Roadmap pages linked to in the References section for further information about this change.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 6 to version 6 Update 171.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-10274, CVE-2017-10281, CVE-2017-10285, CVE-2017-10293, CVE-2017-10295, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)\n\nNote: Starting with this update, Java web browser plugin and Java Web Start application are no longer included with Oracle Java SE 6. Refer to the Releases Notes and the Oracle Java SE Support Roadmap pages linked to in the References section for further information about this change.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:3047", "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html#R160_171", "url": "http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html#R160_171" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javase/eol-135779.html", "url": "http://www.oracle.com/technetwork/java/javase/eol-135779.html" }, { "category": "external", "summary": "1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "1501868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868" }, { "category": "external", "summary": "1501873", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873" }, { "category": "external", "summary": "1502038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038" }, { "category": "external", "summary": "1502053", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502053" }, { "category": "external", "summary": "1502611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611" }, { "category": "external", "summary": "1502614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614" }, { "category": "external", "summary": "1502629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629" }, { "category": "external", "summary": "1502632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632" }, { "category": "external", "summary": "1502649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649" }, { "category": "external", "summary": "1502687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687" }, { "category": "external", "summary": "1502858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858" }, { "category": "external", "summary": "1502869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869" }, { "category": "external", "summary": "1503169", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169" }, { "category": "external", "summary": "1503320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503320" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3047.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-sun security update", "tracking": { "current_release_date": "2024-11-14T21:45:47+00:00", "generator": { "date": "2024-11-14T21:45:47+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:3047", "initial_release_date": "2017-10-24T12:09:09+00:00", "revision_history": [ { "date": "2017-10-24T12:09:09+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-12-14T15:18:13+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T21:45:47+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "product": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "product_id": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.171-1jpp.4.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "product": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.171-1jpp.4.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "product": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "product_id": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.171-1jpp.4.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "product": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "product_id": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.171-1jpp.4.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "product": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "product_id": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.171-1jpp.4.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "product": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "product_id": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.171-1jpp.4.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "product": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "product_id": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.171-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "product": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.171-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "product": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "product_id": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.171-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "product": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "product_id": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.171-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "product": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "product_id": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.171-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "product": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "product_id": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.171-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "product": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "product_id": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.171-1jpp.4.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "product": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "product_id": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.171-1jpp.4.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "product": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.171-1jpp.4.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "product": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "product_id": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.171-1jpp.4.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "product": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "product_id": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.171-1jpp.4.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "product": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "product_id": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.171-1jpp.4.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "product": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "product_id": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.171-1jpp.4.el7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "product": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "product_id": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.171-1jpp.4.el7?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402345" } ], "notes": [ { "category": "description", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inftrees.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9840" }, { "category": "external", "summary": "RHBZ#1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9840" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inftrees.c" }, { "cve": "CVE-2016-9841", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402346" } ], "notes": [ { "category": "description", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inffast.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9841" }, { "category": "external", "summary": "RHBZ#1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9841", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9841" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inffast.c" }, { "cve": "CVE-2016-9842", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402348" } ], "notes": [ { "category": "description", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Undefined left shift of negative number", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9842" }, { "category": "external", "summary": "RHBZ#1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9842", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9842" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Undefined left shift of negative number" }, { "cve": "CVE-2016-9843", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402351" } ], "notes": [ { "category": "description", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Big-endian out-of-bounds pointer", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9843" }, { "category": "external", "summary": "RHBZ#1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9843", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Big-endian out-of-bounds pointer" }, { "cve": "CVE-2017-10274", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502053" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10274" }, { "category": "external", "summary": "RHBZ#1502053", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502053" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10274", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10274" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10274", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10274" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)" }, { "cve": "CVE-2017-10281", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502649" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10281" }, { "category": "external", "summary": "RHBZ#1502649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10281", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10281" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)" }, { "cve": "CVE-2017-10285", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1501868" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10285" }, { "category": "external", "summary": "RHBZ#1501868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10285", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10285" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)" }, { "cve": "CVE-2017-10293", "discovery_date": "2017-10-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503320" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10293" }, { "category": "external", "summary": "RHBZ#1503320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503320" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10293", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10293" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10293", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10293" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)" }, { "cve": "CVE-2017-10295", "cwe": { "id": "CWE-113", "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502687" } ], "notes": [ { "category": "description", "text": "It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additional headers into the request.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10295" }, { "category": "external", "summary": "RHBZ#1502687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10295", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10295" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)" }, { "cve": "CVE-2017-10345", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502858" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10345" }, { "category": "external", "summary": "RHBZ#1502858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10345", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10345" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)" }, { "cve": "CVE-2017-10346", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1501873" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10346" }, { "category": "external", "summary": "RHBZ#1501873", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10346", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)" }, { "cve": "CVE-2017-10347", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502632" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10347" }, { "category": "external", "summary": "RHBZ#1502632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10347", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10347" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)" }, { "cve": "CVE-2017-10348", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502629" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10348" }, { "category": "external", "summary": "RHBZ#1502629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10348", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10348" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)" }, { "cve": "CVE-2017-10349", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502611" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10349" }, { "category": "external", "summary": "RHBZ#1502611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10349", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10349" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)" }, { "cve": "CVE-2017-10355", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502869" } ], "notes": [ { "category": "description", "text": "It was found that the FtpClient implementation in the Networking component of OpenJDK did not set connect and read timeouts by default. A malicious FTP server or a man-in-the-middle attacker could use this flaw to block execution of a Java application connecting to an FTP server.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10355" }, { "category": "external", "summary": "RHBZ#1502869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10355", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10355" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)" }, { "cve": "CVE-2017-10356", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503169" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10356" }, { "category": "external", "summary": "RHBZ#1503169", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10356", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10356" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)" }, { "cve": "CVE-2017-10357", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502614" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10357" }, { "category": "external", "summary": "RHBZ#1502614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10357", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10357" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)" }, { "cve": "CVE-2017-10388", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502038" } ], "notes": [ { "category": "description", "text": "It was discovered that the Kerberos client implementation in the Libraries component of OpenJDK used the sname field from the plain text part rather than encrypted part of the KDC reply message. A man-in-the-middle attacker could possibly use this flaw to impersonate Kerberos services to Java applications acting as Kerberos clients.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10388" }, { "category": "external", "summary": "RHBZ#1502038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10388", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10388" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:09:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3047" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-jdbc-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-plugin-1:1.6.0.171-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.6.0-sun-src-1:1.6.0.171-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)" } ] }
rhsa-2017_2999
Vulnerability from csaf_redhat
Published
2017-10-23 07:44
Modified
2024-11-14 21:45
Summary
Red Hat Security Advisory: java-1.8.0-oracle security update
Notes
Topic
An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 8 to version 8 Update 151.
Security Fix(es):
* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-10274, CVE-2017-10281, CVE-2017-10285, CVE-2017-10293, CVE-2017-10295, CVE-2017-10309, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 8 to version 8 Update 151.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-10274, CVE-2017-10281, CVE-2017-10285, CVE-2017-10293, CVE-2017-10295, CVE-2017-10309, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2999", "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javase/8u151-relnotes-3850493.html", "url": "http://www.oracle.com/technetwork/java/javase/8u151-relnotes-3850493.html" }, { "category": "external", "summary": "1367357", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367357" }, { "category": "external", "summary": "1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "1501868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868" }, { "category": "external", "summary": "1501873", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873" }, { "category": "external", "summary": "1502038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038" }, { "category": "external", "summary": "1502053", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502053" }, { "category": "external", "summary": "1502611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611" }, { "category": "external", "summary": "1502614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614" }, { "category": "external", "summary": "1502629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629" }, { "category": "external", "summary": "1502632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632" }, { "category": "external", "summary": "1502640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502640" }, { "category": "external", "summary": "1502649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649" }, { "category": "external", "summary": "1502687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687" }, { "category": "external", "summary": "1502858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858" }, { "category": "external", "summary": "1502869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869" }, { "category": "external", "summary": "1503169", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169" }, { "category": "external", "summary": "1503319", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503319" }, { "category": "external", "summary": "1503320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503320" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2999.json" } ], "title": "Red Hat Security Advisory: java-1.8.0-oracle security update", "tracking": { "current_release_date": "2024-11-14T21:45:35+00:00", "generator": { "date": "2024-11-14T21:45:35+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2999", "initial_release_date": "2017-10-23T07:44:37+00:00", "revision_history": [ { "date": "2017-10-23T07:44:37+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-12-14T15:18:50+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T21:45:35+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.151-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.151-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.151-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.151-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.151-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.151-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402345" } ], "notes": [ { "category": "description", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inftrees.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9840" }, { "category": "external", "summary": "RHBZ#1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9840" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inftrees.c" }, { "cve": "CVE-2016-9841", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402346" } ], "notes": [ { "category": "description", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inffast.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9841" }, { "category": "external", "summary": "RHBZ#1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9841", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9841" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inffast.c" }, { "cve": "CVE-2016-9842", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402348" } ], "notes": [ { "category": "description", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Undefined left shift of negative number", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9842" }, { "category": "external", "summary": "RHBZ#1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9842", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9842" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Undefined left shift of negative number" }, { "cve": "CVE-2016-9843", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402351" } ], "notes": [ { "category": "description", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Big-endian out-of-bounds pointer", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9843" }, { "category": "external", "summary": "RHBZ#1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9843", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Big-endian out-of-bounds pointer" }, { "cve": "CVE-2016-10165", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2016-08-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1367357" } ], "notes": [ { "category": "description", "text": "The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.", "title": "Vulnerability description" }, { "category": "summary", "text": "lcms2: Out-of-bounds read in Type_MLU_Read()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-10165" }, { "category": "external", "summary": "RHBZ#1367357", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367357" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-10165", "url": "https://www.cve.org/CVERecord?id=CVE-2016-10165" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-10165", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10165" } ], "release_date": "2016-08-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "lcms2: Out-of-bounds read in Type_MLU_Read()" }, { "cve": "CVE-2017-10274", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502053" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10274" }, { "category": "external", "summary": "RHBZ#1502053", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502053" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10274", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10274" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10274", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10274" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)" }, { "cve": "CVE-2017-10281", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502649" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10281" }, { "category": "external", "summary": "RHBZ#1502649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10281", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10281" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)" }, { "cve": "CVE-2017-10285", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1501868" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10285" }, { "category": "external", "summary": "RHBZ#1501868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10285", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10285" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)" }, { "cve": "CVE-2017-10293", "discovery_date": "2017-10-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503320" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10293" }, { "category": "external", "summary": "RHBZ#1503320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503320" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10293", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10293" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10293", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10293" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)" }, { "cve": "CVE-2017-10295", "cwe": { "id": "CWE-113", "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502687" } ], "notes": [ { "category": "description", "text": "It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additional headers into the request.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10295" }, { "category": "external", "summary": "RHBZ#1502687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10295", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10295" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)" }, { "cve": "CVE-2017-10309", "discovery_date": "2017-10-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503319" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10309" }, { "category": "external", "summary": "RHBZ#1503319", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503319" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10309", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10309" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10309", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10309" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)" }, { "cve": "CVE-2017-10345", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502858" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10345" }, { "category": "external", "summary": "RHBZ#1502858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10345", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10345" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)" }, { "cve": "CVE-2017-10346", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1501873" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10346" }, { "category": "external", "summary": "RHBZ#1501873", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10346", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)" }, { "cve": "CVE-2017-10347", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502632" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10347" }, { "category": "external", "summary": "RHBZ#1502632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10347", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10347" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)" }, { "cve": "CVE-2017-10348", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502629" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10348" }, { "category": "external", "summary": "RHBZ#1502629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10348", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10348" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)" }, { "cve": "CVE-2017-10349", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502611" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10349" }, { "category": "external", "summary": "RHBZ#1502611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10349", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10349" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)" }, { "cve": "CVE-2017-10350", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502640" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10350" }, { "category": "external", "summary": "RHBZ#1502640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502640" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10350", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10350" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10350", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10350" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)" }, { "cve": "CVE-2017-10355", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502869" } ], "notes": [ { "category": "description", "text": "It was found that the FtpClient implementation in the Networking component of OpenJDK did not set connect and read timeouts by default. A malicious FTP server or a man-in-the-middle attacker could use this flaw to block execution of a Java application connecting to an FTP server.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10355" }, { "category": "external", "summary": "RHBZ#1502869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10355", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10355" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)" }, { "cve": "CVE-2017-10356", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503169" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10356" }, { "category": "external", "summary": "RHBZ#1503169", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10356", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10356" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)" }, { "cve": "CVE-2017-10357", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502614" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10357" }, { "category": "external", "summary": "RHBZ#1502614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10357", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10357" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)" }, { "cve": "CVE-2017-10388", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502038" } ], "notes": [ { "category": "description", "text": "It was discovered that the Kerberos client implementation in the Libraries component of OpenJDK used the sname field from the plain text part rather than encrypted part of the KDC reply message. A man-in-the-middle attacker could possibly use this flaw to impersonate Kerberos services to Java applications acting as Kerberos clients.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10388" }, { "category": "external", "summary": "RHBZ#1502038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10388", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10388" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-23T07:44:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2999" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.151-1jpp.5.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.151-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)" } ] }
rhsa-2017_3046
Vulnerability from csaf_redhat
Published
2017-10-24 12:14
Modified
2024-11-14 21:45
Summary
Red Hat Security Advisory: java-1.7.0-oracle security update
Notes
Topic
An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 7 to version 7 Update 161.
Security Fix(es):
* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-10274, CVE-2017-10281, CVE-2017-10285, CVE-2017-10293, CVE-2017-10295, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)
Note: Starting with this update, Java web browser plugin and Java Web Start application are no longer included with Oracle Java SE 7. Refer to the Releases Notes and the Oracle Java SE Support Roadmap pages linked to in the References section for further information about this change.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 7 to version 7 Update 161.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-10274, CVE-2017-10281, CVE-2017-10285, CVE-2017-10293, CVE-2017-10295, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)\n\nNote: Starting with this update, Java web browser plugin and Java Web Start application are no longer included with Oracle Java SE 7. Refer to the Releases Notes and the Oracle Java SE Support Roadmap pages linked to in the References section for further information about this change.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:3046", "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_161", "url": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_161" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javase/eol-135779.html", "url": "http://www.oracle.com/technetwork/java/javase/eol-135779.html" }, { "category": "external", "summary": "1367357", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367357" }, { "category": "external", "summary": "1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "1501868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868" }, { "category": "external", "summary": "1501873", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873" }, { "category": "external", "summary": "1502038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038" }, { "category": "external", "summary": "1502053", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502053" }, { "category": "external", "summary": "1502611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611" }, { "category": "external", "summary": "1502614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614" }, { "category": "external", "summary": "1502629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629" }, { "category": "external", "summary": "1502632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632" }, { "category": "external", "summary": "1502640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502640" }, { "category": "external", "summary": "1502649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649" }, { "category": "external", "summary": "1502687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687" }, { "category": "external", "summary": "1502858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858" }, { "category": "external", "summary": "1502869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869" }, { "category": "external", "summary": "1503169", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169" }, { "category": "external", "summary": "1503320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503320" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3046.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-14T21:45:41+00:00", "generator": { "date": "2024-11-14T21:45:41+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:3046", "initial_release_date": "2017-10-24T12:14:29+00:00", "revision_history": [ { "date": "2017-10-24T12:14:29+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-12-14T15:24:06+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T21:45:41+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.161-1jpp.4.el7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.161-1jpp.4.el7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402345" } ], "notes": [ { "category": "description", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inftrees.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9840" }, { "category": "external", "summary": "RHBZ#1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9840" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inftrees.c" }, { "cve": "CVE-2016-9841", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402346" } ], "notes": [ { "category": "description", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inffast.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9841" }, { "category": "external", "summary": "RHBZ#1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9841", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9841" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inffast.c" }, { "cve": "CVE-2016-9842", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402348" } ], "notes": [ { "category": "description", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Undefined left shift of negative number", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9842" }, { "category": "external", "summary": "RHBZ#1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9842", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9842" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Undefined left shift of negative number" }, { "cve": "CVE-2016-9843", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402351" } ], "notes": [ { "category": "description", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Big-endian out-of-bounds pointer", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9843" }, { "category": "external", "summary": "RHBZ#1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9843", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Big-endian out-of-bounds pointer" }, { "cve": "CVE-2016-10165", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2016-08-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1367357" } ], "notes": [ { "category": "description", "text": "The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.", "title": "Vulnerability description" }, { "category": "summary", "text": "lcms2: Out-of-bounds read in Type_MLU_Read()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-10165" }, { "category": "external", "summary": "RHBZ#1367357", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367357" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-10165", "url": "https://www.cve.org/CVERecord?id=CVE-2016-10165" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-10165", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10165" } ], "release_date": "2016-08-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "lcms2: Out-of-bounds read in Type_MLU_Read()" }, { "cve": "CVE-2017-10274", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502053" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10274" }, { "category": "external", "summary": "RHBZ#1502053", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502053" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10274", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10274" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10274", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10274" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)" }, { "cve": "CVE-2017-10281", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502649" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10281" }, { "category": "external", "summary": "RHBZ#1502649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10281", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10281" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)" }, { "cve": "CVE-2017-10285", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1501868" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10285" }, { "category": "external", "summary": "RHBZ#1501868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10285", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10285" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)" }, { "cve": "CVE-2017-10293", "discovery_date": "2017-10-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503320" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10293" }, { "category": "external", "summary": "RHBZ#1503320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503320" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10293", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10293" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10293", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10293" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)" }, { "cve": "CVE-2017-10295", "cwe": { "id": "CWE-113", "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502687" } ], "notes": [ { "category": "description", "text": "It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additional headers into the request.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10295" }, { "category": "external", "summary": "RHBZ#1502687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10295", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10295" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)" }, { "cve": "CVE-2017-10345", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502858" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10345" }, { "category": "external", "summary": "RHBZ#1502858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10345", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10345" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)" }, { "cve": "CVE-2017-10346", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1501873" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10346" }, { "category": "external", "summary": "RHBZ#1501873", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10346", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)" }, { "cve": "CVE-2017-10347", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502632" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10347" }, { "category": "external", "summary": "RHBZ#1502632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10347", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10347" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)" }, { "cve": "CVE-2017-10348", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502629" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10348" }, { "category": "external", "summary": "RHBZ#1502629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10348", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10348" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)" }, { "cve": "CVE-2017-10349", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502611" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10349" }, { "category": "external", "summary": "RHBZ#1502611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10349", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10349" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)" }, { "cve": "CVE-2017-10350", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502640" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10350" }, { "category": "external", "summary": "RHBZ#1502640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502640" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10350", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10350" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10350", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10350" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)" }, { "cve": "CVE-2017-10355", "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502869" } ], "notes": [ { "category": "description", "text": "It was found that the FtpClient implementation in the Networking component of OpenJDK did not set connect and read timeouts by default. A malicious FTP server or a man-in-the-middle attacker could use this flaw to block execution of a Java application connecting to an FTP server.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10355" }, { "category": "external", "summary": "RHBZ#1502869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10355", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10355" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)" }, { "cve": "CVE-2017-10356", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1503169" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10356" }, { "category": "external", "summary": "RHBZ#1503169", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10356", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10356" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)" }, { "cve": "CVE-2017-10357", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502614" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10357" }, { "category": "external", "summary": "RHBZ#1502614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10357", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10357" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)" }, { "cve": "CVE-2017-10388", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "discovery_date": "2017-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1502038" } ], "notes": [ { "category": "description", "text": "It was discovered that the Kerberos client implementation in the Libraries component of OpenJDK used the sname field from the plain text part rather than encrypted part of the KDC reply message. A man-in-the-middle attacker could possibly use this flaw to impersonate Kerberos services to Java applications acting as Kerberos clients.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10388" }, { "category": "external", "summary": "RHBZ#1502038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10388", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10388" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388" } ], "release_date": "2017-10-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-10-24T12:14:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:3046" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)" } ] }
rhsa-2017_1222
Vulnerability from csaf_redhat
Published
2017-05-10 12:43
Modified
2024-11-14 22:39
Summary
Red Hat Security Advisory: java-1.6.0-ibm security update
Notes
Topic
An update for java-1.6.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 6 to version 6 SR16-FP45.
Security Fix(es):
* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security Vulnerabilities page, listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-1289, CVE-2017-3509, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.6.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 6 to version 6 SR16-FP45.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security Vulnerabilities page, listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-1289, CVE-2017-3509, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1222", "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://developer.ibm.com/javasdk/support/security-vulnerabilities/", "url": "https://developer.ibm.com/javasdk/support/security-vulnerabilities/" }, { "category": "external", "summary": "1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "1443052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443052" }, { "category": "external", "summary": "1443068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443068" }, { "category": "external", "summary": "1443083", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443083" }, { "category": "external", "summary": "1443097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443097" }, { "category": "external", "summary": "1449603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449603" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1222.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-ibm security update", "tracking": { "current_release_date": "2024-11-14T22:39:57+00:00", "generator": { "date": "2024-11-14T22:39:57+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:1222", "initial_release_date": "2017-05-10T12:43:49+00:00", "revision_history": [ { "date": "2017-05-10T12:43:49+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-05-10T12:43:49+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T22:39:57+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_id": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-jdbc@1.6.0.16.45-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_id": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-devel@1.6.0.16.45-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_id": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-demo@1.6.0.16.45-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_id": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-javacomm@1.6.0.16.45-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_id": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm@1.6.0.16.45-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_id": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-src@1.6.0.16.45-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_id": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-plugin@1.6.0.16.45-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_id": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-jdbc@1.6.0.16.45-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_id": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-devel@1.6.0.16.45-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_id": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-demo@1.6.0.16.45-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_id": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-javacomm@1.6.0.16.45-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_id": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm@1.6.0.16.45-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_id": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-src@1.6.0.16.45-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_id": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-plugin@1.6.0.16.45-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_id": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-jdbc@1.6.0.16.45-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_id": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-devel@1.6.0.16.45-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_id": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-demo@1.6.0.16.45-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_id": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm@1.6.0.16.45-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_id": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-src@1.6.0.16.45-1jpp.1.el6_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_id": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-jdbc@1.6.0.16.45-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_id": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-devel@1.6.0.16.45-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_id": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-demo@1.6.0.16.45-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_id": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-javacomm@1.6.0.16.45-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_id": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm@1.6.0.16.45-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_id": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-ibm-src@1.6.0.16.45-1jpp.1.el6_9?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402345" } ], "notes": [ { "category": "description", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inftrees.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9840" }, { "category": "external", "summary": "RHBZ#1402345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9840" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inftrees.c" }, { "cve": "CVE-2016-9841", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402346" } ], "notes": [ { "category": "description", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Out-of-bounds pointer arithmetic in inffast.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9841" }, { "category": "external", "summary": "RHBZ#1402346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9841", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9841" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Out-of-bounds pointer arithmetic in inffast.c" }, { "cve": "CVE-2016-9842", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402348" } ], "notes": [ { "category": "description", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Undefined left shift of negative number", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9842" }, { "category": "external", "summary": "RHBZ#1402348", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9842", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9842" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Undefined left shift of negative number" }, { "cve": "CVE-2016-9843", "discovery_date": "2016-12-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1402351" } ], "notes": [ { "category": "description", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability description" }, { "category": "summary", "text": "zlib: Big-endian out-of-bounds pointer", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9843" }, { "category": "external", "summary": "RHBZ#1402351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9843", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843" }, { "category": "external", "summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7", "url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7" }, { "category": "external", "summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "release_date": "2016-09-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "zlib: Big-endian out-of-bounds pointer" }, { "cve": "CVE-2017-1289", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2017-05-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1449603" } ], "notes": [ { "category": "description", "text": "IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: XML External Entity Injection (XXE) error when processing XML data", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-1289" }, { "category": "external", "summary": "RHBZ#1449603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1449603" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1289", "url": "https://www.cve.org/CVERecord?id=CVE-2017-1289" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1289", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1289" } ], "release_date": "2017-05-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: XML External Entity Injection (XXE) error when processing XML data" }, { "cve": "CVE-2017-3509", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443052" } ], "notes": [ { "category": "description", "text": "It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with credentials of a different user.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3509" }, { "category": "external", "summary": "RHBZ#1443052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443052" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3509", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3509" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3509", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3509" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)" }, { "cve": "CVE-2017-3533", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-02-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443083" } ], "notes": [ { "category": "description", "text": "A newline injection flaw was discovered in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: newline injection in the FTP client (Networking, 8170222)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3533" }, { "category": "external", "summary": "RHBZ#1443083", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443083" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3533", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3533" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3533", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3533" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-02-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: newline injection in the FTP client (Networking, 8170222)" }, { "cve": "CVE-2017-3539", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443097" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK did not allow users to restrict the set of algorithms allowed for Jar integrity verification. This flaw could allow an attacker to modify content of the Jar file that used weak signing key or hash algorithm.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: MD5 allowed for jar verification (Security, 8171121)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3539" }, { "category": "external", "summary": "RHBZ#1443097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3539", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3539" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3539", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3539" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: MD5 allowed for jar verification (Security, 8171121)" }, { "cve": "CVE-2017-3544", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-04-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443068" } ], "notes": [ { "category": "description", "text": "A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: newline injection in the SMTP client (Networking, 8171533)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-3544" }, { "category": "external", "summary": "RHBZ#1443068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443068" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-3544", "url": "https://www.cve.org/CVERecord?id=CVE-2017-3544" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA" } ], "release_date": "2017-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-10T12:43:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1222" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-demo-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-devel-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-javacomm-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-jdbc-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-plugin-1:1.6.0.16.45-1jpp.1.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.6.0-ibm-src-1:1.6.0.16.45-1jpp.1.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: newline injection in the SMTP client (Networking, 8171533)" } ] }
ICSA-19-155-01
Vulnerability from csaf_cisa
Published
2019-06-04 00:00
Modified
2019-06-04 00:00
Summary
PHOENIX CONTACT PLCNext AXC F 2152
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.
Critical infrastructure sectors
Commercial Facilities
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.
Recommended Practices
NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:
Exploitability
No known public exploits specifically target these vulnerabilities.
{ "document": { "acknowledgments": [ { "names": [ "Zahra Khani" ], "organization": "Firmalyzer", "summary": "reporting some of these vulnerabilities to NCCIC" }, { "organization": "OPC Foundation", "summary": "reporting some of these vulnerabilities to Phoenix Contact" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.", "title": "Risk evaluation" }, { "category": "other", "text": "Commercial Facilities", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:", "title": "Recommended Practices" }, { "category": "other", "text": "No known public exploits specifically target these vulnerabilities.", "title": "Exploitability" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-19-155-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-155-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-19-155-01 - Web Scraped Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" } ], "title": "PHOENIX CONTACT PLCNext AXC F 2152", "tracking": { "current_release_date": "2019-06-04T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-19-155-01", "initial_release_date": "2019-06-04T00:00:00.000000Z", "revision_history": [ { "date": "2019-06-04T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-19-155-01 PHOENIX CONTACT PLCNext AXC F 2152" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "2404267 version 1.x", "product": { "name": "AXC F 2152: article number 2404267 version 1.x", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "AXC F 2152" }, { "branches": [ { "category": "product_version_range", "name": "1046568 (Starterkit) version 1.x", "product": { "name": "AXC F 2152: article number 1046568 (Starterkit) version 1.x", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "AXC F 2152" } ], "category": "vendor", "name": "Phoenix Contact" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-7559", "cwe": { "id": "CWE-326", "name": "Inadequate Encryption Strength" }, "notes": [ { "category": "summary", "text": "A remote attacker can exploit a server \u0027s private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7559" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2019-10998", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "summary", "text": "An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10998" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2019-10997", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "notes": [ { "category": "summary", "text": "An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10997" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-8816", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "summary", "text": "The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8816" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9953", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9953" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-8817", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an \u0027[\u0027 character.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8817" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11541", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11541" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11542", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11542" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11543", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11543" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5334", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "summary", "text": "Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5334" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5336", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5336" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9841", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "notes": [ { "category": "summary", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9841" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000120", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "summary", "text": "A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000120" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5337", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5337" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9843", "cwe": { "id": "CWE-354", "name": "Improper Validation of Integrity Check Value" }, "notes": [ { "category": "summary", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9843" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000257", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl\u0027s deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000257" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000122", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000122" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000301", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000301" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000005", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn\u0027t updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000005" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9842", "cwe": { "id": "CWE-1335", "name": "Incorrect Bitwise Shift of Integer" }, "notes": [ { "category": "summary", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9842" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9840", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "notes": [ { "category": "summary", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9840" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9952", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "summary", "text": "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by \"*.com.\"", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9952" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-1247", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)" }, "notes": [ { "category": "summary", "text": "The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1247" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9023", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9023" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-6301", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "summary", "text": "The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6301" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7141", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "summary", "text": "curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7141" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7444", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "summary", "text": "The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7444" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000121", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000121" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000254", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000254" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11108", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11108" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11185", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11185" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3731", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3731" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9233", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9233" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5335", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5335" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9022", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "summary", "text": "The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9022" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000117", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000117" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-5388", "cwe": { "id": "CWE-124", "name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)" }, "notes": [ { "category": "summary", "text": "In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5388" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000101", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "curl supports \"globbing\" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000101" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000100", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "summary", "text": "When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn\u0027t restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl\u0027s redirect protocols with --proto-redir and libcurl\u0027s with CURLOPT_REDIR_PROTOCOLS.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000100" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7103", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "summary", "text": "Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7103" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2015-9251", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "summary", "text": "jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3738", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "summary", "text": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3738" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-0737", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "notes": [ { "category": "summary", "text": "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0737" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3737", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "summary", "text": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3737" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-15906", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "summary", "text": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15906" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3735", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3735" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] } ] }
icsa-19-155-01
Vulnerability from csaf_cisa
Published
2019-06-04 00:00
Modified
2019-06-04 00:00
Summary
PHOENIX CONTACT PLCNext AXC F 2152
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.
Critical infrastructure sectors
Commercial Facilities
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.
Recommended Practices
NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:
Exploitability
No known public exploits specifically target these vulnerabilities.
{ "document": { "acknowledgments": [ { "names": [ "Zahra Khani" ], "organization": "Firmalyzer", "summary": "reporting some of these vulnerabilities to NCCIC" }, { "organization": "OPC Foundation", "summary": "reporting some of these vulnerabilities to Phoenix Contact" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.", "title": "Risk evaluation" }, { "category": "other", "text": "Commercial Facilities", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:", "title": "Recommended Practices" }, { "category": "other", "text": "No known public exploits specifically target these vulnerabilities.", "title": "Exploitability" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-19-155-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-155-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-19-155-01 - Web Scraped Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" } ], "title": "PHOENIX CONTACT PLCNext AXC F 2152", "tracking": { "current_release_date": "2019-06-04T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-19-155-01", "initial_release_date": "2019-06-04T00:00:00.000000Z", "revision_history": [ { "date": "2019-06-04T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-19-155-01 PHOENIX CONTACT PLCNext AXC F 2152" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "2404267 version 1.x", "product": { "name": "AXC F 2152: article number 2404267 version 1.x", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "AXC F 2152" }, { "branches": [ { "category": "product_version_range", "name": "1046568 (Starterkit) version 1.x", "product": { "name": "AXC F 2152: article number 1046568 (Starterkit) version 1.x", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "AXC F 2152" } ], "category": "vendor", "name": "Phoenix Contact" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-7559", "cwe": { "id": "CWE-326", "name": "Inadequate Encryption Strength" }, "notes": [ { "category": "summary", "text": "A remote attacker can exploit a server \u0027s private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7559" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2019-10998", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "summary", "text": "An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10998" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2019-10997", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "notes": [ { "category": "summary", "text": "An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10997" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-8816", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "summary", "text": "The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8816" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9953", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9953" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-8817", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an \u0027[\u0027 character.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8817" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11541", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11541" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11542", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11542" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11543", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11543" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5334", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "summary", "text": "Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5334" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5336", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5336" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9841", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "notes": [ { "category": "summary", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9841" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000120", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "summary", "text": "A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000120" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5337", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5337" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9843", "cwe": { "id": "CWE-354", "name": "Improper Validation of Integrity Check Value" }, "notes": [ { "category": "summary", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9843" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000257", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl\u0027s deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000257" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000122", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000122" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000301", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000301" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000005", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn\u0027t updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000005" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9842", "cwe": { "id": "CWE-1335", "name": "Incorrect Bitwise Shift of Integer" }, "notes": [ { "category": "summary", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9842" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9840", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "notes": [ { "category": "summary", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9840" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9952", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "summary", "text": "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by \"*.com.\"", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9952" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-1247", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)" }, "notes": [ { "category": "summary", "text": "The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1247" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9023", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9023" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-6301", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "summary", "text": "The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6301" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7141", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "summary", "text": "curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7141" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7444", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "summary", "text": "The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7444" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000121", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000121" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000254", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000254" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11108", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11108" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11185", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11185" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3731", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3731" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9233", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9233" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5335", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5335" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9022", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "summary", "text": "The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9022" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000117", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000117" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-5388", "cwe": { "id": "CWE-124", "name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)" }, "notes": [ { "category": "summary", "text": "In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5388" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000101", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "curl supports \"globbing\" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000101" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000100", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "summary", "text": "When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn\u0027t restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl\u0027s redirect protocols with --proto-redir and libcurl\u0027s with CURLOPT_REDIR_PROTOCOLS.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000100" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7103", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "summary", "text": "Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7103" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2015-9251", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "summary", "text": "jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3738", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "summary", "text": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3738" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-0737", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "notes": [ { "category": "summary", "text": "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0737" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3737", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "summary", "text": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3737" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-15906", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "summary", "text": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15906" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3735", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3735" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] } ] }
wid-sec-w-2024-1232
Vulnerability from csaf_certbund
Published
2020-02-24 23:00
Modified
2024-05-23 22:00
Summary
Rsync: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Rsync ist ein Tool, um Dateien und Verzeichnisse zu synchronisieren.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Rsync ausnutzen, um beliebigen Programmcode auszuführen, oder einen Denial of Service Zustand herbeizuführen.
Betroffene Betriebssysteme
- Linux
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Rsync ist ein Tool, um Dateien und Verzeichnisse zu synchronisieren.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Rsync ausnutzen, um beliebigen Programmcode auszuf\u00fchren, oder einen Denial of Service Zustand herbeizuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-1232 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2024-1232.json" }, { "category": "self", "summary": "WID-SEC-2024-1232 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1232" }, { "category": "external", "summary": "Ubuntu Security Notice:4292-1 vom 2020-02-24", "url": "https://usn.ubuntu.com/4292-1/" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6736-2 vom 2024-05-23", "url": "https://ubuntu.com/security/notices/USN-6736-2" } ], "source_lang": "en-US", "title": "Rsync: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-05-23T22:00:00.000+00:00", "generator": { "date": "2024-05-24T08:08:58.103+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2024-1232", "initial_release_date": "2020-02-24T23:00:00.000+00:00", "revision_history": [ { "date": "2020-02-24T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-05-23T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Ubuntu aufgenommen" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c3.1.1-3ubuntu1.3", "product": { "name": "Open Source Rsync \u003c3.1.1-3ubuntu1.3", "product_id": "T015946", "product_identification_helper": { "cpe": "cpe:/a:gnu:rsync:3.1.1-3ubuntu1.3" } } }, { "category": "product_version_range", "name": "\u003c3.1.2-2.1ubuntu1.1", "product": { "name": "Open Source Rsync \u003c3.1.2-2.1ubuntu1.1", "product_id": "T015947", "product_identification_helper": { "cpe": "cpe:/a:gnu:rsync:3.1.2-2.1ubuntu1.1" } } } ], "category": "product_name", "name": "Rsync" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "notes": [ { "category": "description", "text": "In Rsync existieren mehrere Schwachstellen in der Komponente zlib. Diese sind auf Fehler in der Zeiger-Arithmetik, Fehler in Big Endian Berechnungen als auch Linksverschiebungen von negativen Integer-Werten zur\u00fcckzuf\u00fchren. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "product_status": { "known_affected": [ "T000126" ] }, "release_date": "2020-02-24T23:00:00Z", "title": "CVE-2016-9840" }, { "cve": "CVE-2016-9841", "notes": [ { "category": "description", "text": "In Rsync existieren mehrere Schwachstellen in der Komponente zlib. Diese sind auf Fehler in der Zeiger-Arithmetik, Fehler in Big Endian Berechnungen als auch Linksverschiebungen von negativen Integer-Werten zur\u00fcckzuf\u00fchren. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "product_status": { "known_affected": [ "T000126" ] }, "release_date": "2020-02-24T23:00:00Z", "title": "CVE-2016-9841" }, { "cve": "CVE-2016-9842", "notes": [ { "category": "description", "text": "In Rsync existieren mehrere Schwachstellen in der Komponente zlib. Diese sind auf Fehler in der Zeiger-Arithmetik, Fehler in Big Endian Berechnungen als auch Linksverschiebungen von negativen Integer-Werten zur\u00fcckzuf\u00fchren. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "product_status": { "known_affected": [ "T000126" ] }, "release_date": "2020-02-24T23:00:00Z", "title": "CVE-2016-9842" }, { "cve": "CVE-2016-9843", "notes": [ { "category": "description", "text": "In Rsync existieren mehrere Schwachstellen in der Komponente zlib. Diese sind auf Fehler in der Zeiger-Arithmetik, Fehler in Big Endian Berechnungen als auch Linksverschiebungen von negativen Integer-Werten zur\u00fcckzuf\u00fchren. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "product_status": { "known_affected": [ "T000126" ] }, "release_date": "2020-02-24T23:00:00Z", "title": "CVE-2016-9843" } ] }
WID-SEC-W-2024-1232
Vulnerability from csaf_certbund
Published
2020-02-24 23:00
Modified
2024-05-23 22:00
Summary
Rsync: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Rsync ist ein Tool, um Dateien und Verzeichnisse zu synchronisieren.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Rsync ausnutzen, um beliebigen Programmcode auszuführen, oder einen Denial of Service Zustand herbeizuführen.
Betroffene Betriebssysteme
- Linux
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Rsync ist ein Tool, um Dateien und Verzeichnisse zu synchronisieren.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Rsync ausnutzen, um beliebigen Programmcode auszuf\u00fchren, oder einen Denial of Service Zustand herbeizuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-1232 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2024-1232.json" }, { "category": "self", "summary": "WID-SEC-2024-1232 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1232" }, { "category": "external", "summary": "Ubuntu Security Notice:4292-1 vom 2020-02-24", "url": "https://usn.ubuntu.com/4292-1/" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6736-2 vom 2024-05-23", "url": "https://ubuntu.com/security/notices/USN-6736-2" } ], "source_lang": "en-US", "title": "Rsync: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-05-23T22:00:00.000+00:00", "generator": { "date": "2024-05-24T08:08:58.103+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2024-1232", "initial_release_date": "2020-02-24T23:00:00.000+00:00", "revision_history": [ { "date": "2020-02-24T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-05-23T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Ubuntu aufgenommen" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c3.1.1-3ubuntu1.3", "product": { "name": "Open Source Rsync \u003c3.1.1-3ubuntu1.3", "product_id": "T015946", "product_identification_helper": { "cpe": "cpe:/a:gnu:rsync:3.1.1-3ubuntu1.3" } } }, { "category": "product_version_range", "name": "\u003c3.1.2-2.1ubuntu1.1", "product": { "name": "Open Source Rsync \u003c3.1.2-2.1ubuntu1.1", "product_id": "T015947", "product_identification_helper": { "cpe": "cpe:/a:gnu:rsync:3.1.2-2.1ubuntu1.1" } } } ], "category": "product_name", "name": "Rsync" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9840", "notes": [ { "category": "description", "text": "In Rsync existieren mehrere Schwachstellen in der Komponente zlib. Diese sind auf Fehler in der Zeiger-Arithmetik, Fehler in Big Endian Berechnungen als auch Linksverschiebungen von negativen Integer-Werten zur\u00fcckzuf\u00fchren. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "product_status": { "known_affected": [ "T000126" ] }, "release_date": "2020-02-24T23:00:00Z", "title": "CVE-2016-9840" }, { "cve": "CVE-2016-9841", "notes": [ { "category": "description", "text": "In Rsync existieren mehrere Schwachstellen in der Komponente zlib. Diese sind auf Fehler in der Zeiger-Arithmetik, Fehler in Big Endian Berechnungen als auch Linksverschiebungen von negativen Integer-Werten zur\u00fcckzuf\u00fchren. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "product_status": { "known_affected": [ "T000126" ] }, "release_date": "2020-02-24T23:00:00Z", "title": "CVE-2016-9841" }, { "cve": "CVE-2016-9842", "notes": [ { "category": "description", "text": "In Rsync existieren mehrere Schwachstellen in der Komponente zlib. Diese sind auf Fehler in der Zeiger-Arithmetik, Fehler in Big Endian Berechnungen als auch Linksverschiebungen von negativen Integer-Werten zur\u00fcckzuf\u00fchren. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "product_status": { "known_affected": [ "T000126" ] }, "release_date": "2020-02-24T23:00:00Z", "title": "CVE-2016-9842" }, { "cve": "CVE-2016-9843", "notes": [ { "category": "description", "text": "In Rsync existieren mehrere Schwachstellen in der Komponente zlib. Diese sind auf Fehler in der Zeiger-Arithmetik, Fehler in Big Endian Berechnungen als auch Linksverschiebungen von negativen Integer-Werten zur\u00fcckzuf\u00fchren. Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "product_status": { "known_affected": [ "T000126" ] }, "release_date": "2020-02-24T23:00:00Z", "title": "CVE-2016-9843" } ] }
gsd-2016-9842
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2016-9842", "description": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "id": "GSD-2016-9842", "references": [ "https://www.suse.com/security/cve/CVE-2016-9842.html", "https://access.redhat.com/errata/RHSA-2017:3453", "https://access.redhat.com/errata/RHSA-2017:3047", "https://access.redhat.com/errata/RHSA-2017:3046", "https://access.redhat.com/errata/RHSA-2017:2999", "https://access.redhat.com/errata/RHSA-2017:1222", "https://access.redhat.com/errata/RHSA-2017:1221", "https://access.redhat.com/errata/RHSA-2017:1220", "https://ubuntu.com/security/CVE-2016-9842", "https://advisories.mageia.org/CVE-2016-9842.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2016-9842" ], "details": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "id": "GSD-2016-9842", "modified": "2023-12-13T01:21:21.947724Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security@microfocus.com", "ID": "CVE-2016-9842", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2017:1221", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "name": "RHSA-2017:1220", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "name": "RHSA-2017:3047", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21" }, { "name": "95131", "refsource": "BID", "url": "http://www.securityfocus.com/bid/95131" }, { "name": "RHSA-2017:3046", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "name": "openSUSE-SU-2017:0077", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" }, { "name": "GLSA-201701-56", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201701-56" }, { "name": "1039427", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039427" }, { "name": "RHSA-2017:1222", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "name": "openSUSE-SU-2017:0080", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" }, { "name": "RHSA-2017:3453", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "name": "openSUSE-SU-2016:3202", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" }, { "name": "RHSA-2017:2999", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html" }, { "name": "USN-4246-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4246-1/" }, { "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html" }, { "name": "USN-4292-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4292-1/" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html" }, { "name": "https://www.oracle.com/security-alerts/cpujul2020.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujul2020.html" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" }, { "name": "https://support.apple.com/HT208144", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208144" }, { "name": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib", "refsource": "MISC", "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib" }, { "name": "https://support.apple.com/HT208113", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208113" }, { "name": "https://support.apple.com/HT208112", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208112" }, { "name": "https://support.apple.com/HT208115", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208115" }, { "name": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "refsource": "MISC", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "name": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958", "refsource": "CONFIRM", "url": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958" }, { "name": "GLSA-202007-54", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202007-54" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:gnu:zlib:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.2.9", "versionStartIncluding": "1.2.3.4", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "5.7.23", "versionStartIncluding": "5.7.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "8.0.12", "versionStartIncluding": "8.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "5.5.61", "versionStartIncluding": "5.5.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "5.6.41", "versionStartIncluding": "5.6.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "11.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "11", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "4", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "10.13.0", "versionStartIncluding": "10.0.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndIncluding": "4.1.2", "versionStartIncluding": "4.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndIncluding": "6.8.1", "versionStartIncluding": "6.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*", "cpe_name": [], "versionEndExcluding": "4.8.2", "versionStartIncluding": "4.2.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*", "cpe_name": [], "versionEndExcluding": "6.10.2", "versionStartIncluding": "6.9.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndExcluding": "7.6.0", "versionStartIncluding": "7.0.0", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "security@suse.com", "ID": "CVE-2016-9842" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ] }, "references": { "reference_data": [ { "name": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib" }, { "name": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "refsource": "MISC", "tags": [ "Exploit", "Technical Description", "Third Party Advisory" ], "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" }, { "name": "GLSA-201701-56", "refsource": "GENTOO", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/201701-56" }, { "name": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348", "refsource": "CONFIRM", "tags": [ "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "name": "95131", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/95131" }, { "name": "[oss-security] 20161205 Re: CVE Request: zlib security issues found during audit", "refsource": "MLIST", "tags": [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ], "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21" }, { "name": "openSUSE-SU-2017:0080", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" }, { "name": "openSUSE-SU-2017:0077", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" }, { "name": "openSUSE-SU-2016:3202", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" }, { "name": "1039427", "refsource": "SECTRACK", "tags": [ "Broken Link", "Third Party Advisory", "VDB Entry" ], "url": "http://www.securitytracker.com/id/1039427" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", "refsource": "CONFIRM", "tags": [ "Patch", "Third Party Advisory" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" }, { "name": "https://support.apple.com/HT208144", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.apple.com/HT208144" }, { "name": "https://support.apple.com/HT208115", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.apple.com/HT208115" }, { "name": "https://support.apple.com/HT208113", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.apple.com/HT208113" }, { "name": "https://support.apple.com/HT208112", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.apple.com/HT208112" }, { "name": "RHSA-2017:3047", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "name": "RHSA-2017:3046", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "name": "RHSA-2017:3453", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "name": "RHSA-2017:2999", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "name": "RHSA-2017:1222", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "name": "RHSA-2017:1221", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "name": "RHSA-2017:1220", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html", "refsource": "CONFIRM", "tags": [ "Patch", "Third Party Advisory" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html" }, { "name": "[debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update", "refsource": "MLIST", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html" }, { "name": "USN-4246-1", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/4246-1/" }, { "name": "[debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update", "refsource": "MLIST", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html" }, { "name": "USN-4292-1", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/4292-1/" }, { "name": "https://www.oracle.com/security-alerts/cpujul2020.html", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://www.oracle.com/security-alerts/cpujul2020.html" }, { "name": "GLSA-202007-54", "refsource": "GENTOO", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202007-54" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 5.9 } }, "lastModifiedDate": "2022-08-16T13:02Z", "publishedDate": "2017-05-23T04:29Z" } } }
ghsa-3686-jjcf-4w27
Vulnerability from github
Published
2022-05-13 01:25
Modified
2024-08-28 18:31
Severity ?
Details
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
{ "affected": [], "aliases": [ "CVE-2016-9842" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-05-23T04:29:00Z", "severity": "HIGH" }, "details": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "id": "GHSA-3686-jjcf-4w27", "modified": "2024-08-28T18:31:52Z", "published": "2022-05-13T01:25:01Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842" }, { "type": "WEB", "url": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpujul2020.html" }, { "type": "WEB", "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" }, { "type": "WEB", "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib" }, { "type": "WEB", "url": "https://usn.ubuntu.com/4292-1" }, { "type": "WEB", "url": "https://usn.ubuntu.com/4246-1" }, { "type": "WEB", "url": "https://support.apple.com/HT208144" }, { "type": "WEB", "url": "https://support.apple.com/HT208115" }, { "type": "WEB", "url": "https://support.apple.com/HT208113" }, { "type": "WEB", "url": "https://support.apple.com/HT208112" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/202007-54" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201701-56" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21" }, { "type": "WEB", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" }, { "type": "WEB", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/95131" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1039427" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.