Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in the bypass of
Java sandbox restrictions, denial of service, arbitrary code execution,
incorrect parsing of URLs/LDAP DNs or cryptographic timing side channel
attacks
For the stable distribution (jessie), these problems have been fix ...
Several security issues were fixed in OpenJDK 8 ...
Several security issues were fixed in OpenJDK 7 ...
Several security issues were fixed in OpenJDK 6 ...
Synopsis
Critical: java-170-ibm security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-170-ibm is now available for Red Hat Enterprise Linux 5SupplementaryRed Hat Product Security has rated this update as having a security impact ofCritical A Common Vulnerability Scoring Sy ...
Synopsis
Moderate: java-171-ibm security update
Type/Severity
Security Advisory: Moderate
Topic
An update for java-171-ibm is now available for Red HatSatellite 57 and Red Hat Satellite 56Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Sc ...
Synopsis
Critical: java-171-ibm security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-171-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 SupplementaryRed Hat Product Security has rated this update as having a security impact ...
Synopsis
Critical: java-170-openjdk security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-170-openjdk is now available for Red Hat Enterprise Linux5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a securit ...
Synopsis
Critical: java-180-oracle security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-180-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a secur ...
Synopsis
Critical: java-160-sun security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-160-sun is now available for Oracle Java for Red Hat Enterprise Linux 5, Oracle Java for Red Hat Enterprise Linux 6, and Oracle Java for Red Hat Enterprise Linux 7Red Hat Product Security ...
Synopsis
Critical: java-180-ibm security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-180-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 SupplementaryRed Hat Product Security has rated this update as having a security impact ...
Synopsis
Critical: java-180-openjdk security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-180-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Critical A Comm ...
Synopsis
Critical: java-170-oracle security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-170-oracle is now available for Oracle Java for Red Hat Enterprise Linux 5, Oracle Java for Red Hat Enterprise Linux 6, and Oracle Java for Red Hat Enterprise Linux 7Red Hat Product Sec ...
Synopsis
Critical: java-160-ibm security update
Type/Severity
Security Advisory: Critical
Topic
An update for java-160-ibm is now available for Red Hat Enterprise Linux 5Supplementary and Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact ...
It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory ...
It was discovered that the RMI registry and DCG implementations in the RMI component of OpenJDK performed deserialization of untrusted inputs A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application (CVE-2017-3241) This issue was addressed by introducing whitelists of c ...
It was discovered that the RMI registry and DCG implementations in the RMI component of OpenJDK performed deserialization of untrusted inputs A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application This issue was addressed by introducing whitelists of classes that can ...
Vulmon