An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 7 to version 7R1 SR4-FP15.

Security Fix(es) :

* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security Vulnerabilities page listed in the References section.
(CVE-2016-10165, CVE-2017-10281, CVE-2017-10285, CVE-2017-10295, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3453 advisory.

    IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM     Java Software Development Kit.

    This update upgrades IBM Java SE 8 to version 8 SR5-FP5.

    Security Fix(es):

    * This update fixes multiple vulnerabilities in the IBM Java Runtime     Environment and the IBM Java Software Development Kit. Further information     about these flaws can be found on the IBM Java Security Vulnerabilities     page listed in the References section. (CVE-2016-9840, CVE-2016-9841,     CVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-1289, CVE-2017-3509,     CVE-2017-3511, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544, CVE-2017-10053,     CVE-2017-10067, CVE-2017-10078, CVE-2017-10087, CVE-2017-10089,     CVE-2017-10090, CVE-2017-10096, CVE-2017-10101, CVE-2017-10102,     CVE-2017-10105, CVE-2017-10107, CVE-2017-10108, CVE-2017-10109,     CVE-2017-10110, CVE-2017-10115, CVE-2017-10116, CVE-2017-10243,     CVE-2017-10281, CVE-2017-10285, CVE-2017-10295, CVE-2017-10309,     CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348,     CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356,     CVE-2017-10357, CVE-2017-10388)

    For details on how to apply this update, which includes the changes     described in this advisory, refer to:

    https://access.redhat.com/articles/11258

    For this update to take effect, Red Hat Satellite must be restarted     (/usr/sbin/rhn-satellite restart). All running instances of IBM Java must     be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for java-1_8_0-ibm fixes the following issues: Security issues fixed :

  - Security update to version 8.0.5.5 (bsc#1070162)

  - CVE-2017-10346 CVE-2017-10285 CVE-2017-10388     CVE-2017-10309 CVE-2017-10356 CVE-2017-10293     CVE-2016-9841 CVE-2016-10165 CVE-2017-10355     CVE-2017-10357 CVE-2017-10348 CVE-2017-10349     CVE-2017-10347 CVE-2017-10350 CVE-2017-10281     CVE-2017-10295 CVE-2017-10345

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
104840	RHEL 6 / 7 : java-1.7.1-ibm (RHSA-2017:3268)	Nessus	Red Hat Local Security Checks	11/29/2017	11/13/2025	critical
105267	RHEL 6 : java-1.8.0-ibm (RHSA-2017:3453)	Nessus	Red Hat Local Security Checks	12/15/2017	4/15/2025	critical
105462	SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2017:3411-1)	Nessus	SuSE Local Security Checks	12/26/2017	11/10/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical