Oval Definition:oval:com.redhat.rhsa:def:20182255
Revision Date:2018-07-24Version:636
Title:RHSA-2018:2255: java-1.7.0-oracle security update (Critical)
Description:Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.

This update upgrades Oracle Java SE 7 to version 7 Update 191.

Security Fix(es):

  • Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)

  • Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)

  • OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)

  • Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)

    For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2018-2940
    CVE-2018-2941
    CVE-2018-2952
    CVE-2018-2973
    RHSA-2018:2255
    RHSA-2018:2255-00
    RHSA-2018:2255-01
    RHSA-2018:2255-02
    Platform(s):Oracle Java for Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • java-1.7.0-oracle is earlier than 1:1.7.0.191-1jpp.1.el6
  • AND java-1.7.0-oracle is signed with Red Hat redhatrelease2 key
  • java-1.7.0-oracle-devel is earlier than 1:1.7.0.191-1jpp.1.el6
  • AND java-1.7.0-oracle-devel is signed with Red Hat redhatrelease2 key
  • java-1.7.0-oracle-javafx is earlier than 1:1.7.0.191-1jpp.1.el6
  • AND java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease2 key
  • java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.191-1jpp.1.el6
  • AND java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease2 key
  • java-1.7.0-oracle-plugin is earlier than 1:1.7.0.191-1jpp.1.el6
  • AND java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease2 key
  • java-1.7.0-oracle-src is earlier than 1:1.7.0.191-1jpp.1.el6
  • AND java-1.7.0-oracle-src is signed with Red Hat redhatrelease2 key
  • BACK