Oval Definition:oval:com.redhat.rhsa:def:20183521
Revision Date:2018-11-07Version:636
Title:RHSA-2018:3521: java-11-openjdk security update (Critical)
Description:The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

  • OpenJDK: Improper field access checks (Hotspot, 8199226) (CVE-2018-3169)

  • OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936) (CVE-2018-3183)

  • OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177) (CVE-2018-3149)

  • OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534) (CVE-2018-3136)

  • OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902) (CVE-2018-3139)

  • OpenJDK: Multi-Release attribute read from outside of the main manifest attributes (Utility, 8199171) (CVE-2018-3150)

  • OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613) (CVE-2018-3180)

    For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2018-3136
    CVE-2018-3139
    CVE-2018-3149
    CVE-2018-3150
    CVE-2018-3169
    CVE-2018-3180
    CVE-2018-3183
    RHSA-2018:3521
    RHSA-2018:3521-01
    Platform(s):Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • java-11-openjdk is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-debug is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-debug is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-demo is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-demo is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-demo-debug is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-demo-debug is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-devel is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-devel is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-devel-debug is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-devel-debug is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-headless is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-headless is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-headless-debug is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-headless-debug is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-javadoc is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-javadoc is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-javadoc-debug is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-javadoc-debug is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-javadoc-zip is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-javadoc-zip is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-javadoc-zip-debug is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-javadoc-zip-debug is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-jmods is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-jmods is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-jmods-debug is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-jmods-debug is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-src is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-src is signed with Red Hat redhatrelease2 key
  • java-11-openjdk-src-debug is earlier than 1:11.0.1.13-3.el7_6
  • AND java-11-openjdk-src-debug is signed with Red Hat redhatrelease2 key
  • BACK