Lucene search

K
oraclelinuxOracleLinuxELSA-2016-2079
HistoryOct 19, 2016 - 12:00 a.m.

java-1.8.0-openjdk security update

2016-10-1900:00:00
linux.oracle.com
41

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

80.5%

[1:1.8.0.111-0.b15]

  • added nss restricting requires
  • Resolves: rhbz#1381990
    [1:1.8.0.111-0.b15]
  • Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
  • Resolves: rhbz#1381990
    [1:1.8.0.111-0.b15]
  • Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
  • Resolves: rhbz#1381990
    [1:1.8.0.111-0.b14]
  • Update to aarch64-jdk8u111-b14.
  • Drop the CORBA typo fix, which appears upstream in u111.
  • Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  • Resolves: rhbz#1381990
    [1:1.8.0.102-1.b14]
  • New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
  • Resolves: rhbz#1381990
    [1:1.8.0.102-0.b14]
  • Update to aarch64-jdk8u102-b14.
  • Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  • Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  • Move 8158260 to 8u112 section following its backport to 8u.
  • Resolves: rhbz#1381990
    [1:1.8.0.101-4.b15]
  • Update to aarch64-jdk8u101-b15.
  • Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  • Drop additional hunk for 8147771 which is now applied upstream.
  • Resolves: rhbz#1381990

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

80.5%