IBM Java 7.1 was updated to version 7.1-3.50 to fix the following security issues: CVE-2016-3485 CVE-2016-3511 CVE-2016-3598 Please see https://www.ibm.com/developerworks/java/jdk/alerts/ for more information.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

IBM Java 8 was updated to version 8.0-3.10 to fix the following security issues :

  - CVE-2016-3485: Unspecified vulnerability allowed local     users to affect integrity via vectors related to     Networking

  - CVE-2016-3511: Unspecified vulnerability allowed local     users to affect confidentiality, integrity, and     availability via vectors related to Deployment

  - CVE-2016-3598: Unspecified vulnerability allowed remote     attackers to affect confidentiality, integrity, and     availability via vectors related to Libraries Please see     https://www.ibm.com/developerworks/java/jdk/alerts/ for     more information.

  - Add hwkeytool binary for zSeries.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple flaws were discovered in the Hotspot and     Libraries components in OpenJDK. An untrusted Java     application or applet could use these flaws to     completely bypass Java sandbox restrictions.
    CVE-2016-3606, CVE-2016-3598, CVE-2016-3610)

  - Multiple denial of service flaws were found in the JAXP     component in OpenJDK. A specially crafted XML file     could cause a Java application using JAXP to consume an     excessive amount of CPU and memory when parsed.
    (CVE-2016-3500, CVE-2016-3508)

  - Multiple flaws were found in the CORBA and Hotsport     components in OpenJDK. An untrusted Java application or     applet could use these flaws to bypass certain Java     sandbox restrictions. (CVE-2016-3458, CVE-2016-3550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.7 and Red Hat Satellite 5.6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 7 to version 7R1 SR4-FP1.

Security Fix(es) :

* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security alerts page, listed in the References section. (CVE-2016-2183, CVE-2017-3272, CVE-2017-3289, CVE-2017-3253, CVE-2017-3261, CVE-2017-3231, CVE-2016-5547, CVE-2016-5552, CVE-2017-3252, CVE-2016-5546, CVE-2016-5548, CVE-2016-5549, CVE-2017-3241, CVE-2017-3259, CVE-2016-5573, CVE-2016-5554, CVE-2016-5542, CVE-2016-5597, CVE-2016-5556, CVE-2016-3598, CVE-2016-3511, CVE-2016-0363, CVE-2016-0686, CVE-2016-0687, CVE-2016-3426, CVE-2016-3427, CVE-2016-3443, CVE-2016-3449, CVE-2016-3422, CVE-2016-0376, CVE-2016-0264)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
93281	SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2016:2012-1)	Nessus	SuSE Local Security Checks	2016/9/2	2026/1/27	critical
93373	SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2016:2261-1)	Nessus	SuSE Local Security Checks	2016/9/8	2026/1/27	critical
94609	SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2016:2726-1)	Nessus	SuSE Local Security Checks	2016/11/7	2026/1/20	critical
99795	EulerOS 2.0 SP1 : java-1.7.0-openjdk (EulerOS-SA-2016-1032)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	critical
100094	RHEL 6 : java-1.7.1-ibm (RHSA-2017:1216)	Nessus	Red Hat Local Security Checks	2017/5/10	2025/12/19	critical

检测

插件搜索

critical

critical

critical

critical

critical