2855 matches found
RHEL 7 : java-1.7.1-ibm (RHSA-2019:0473)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0473 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IB...
RHEL 6 : java-1.8.0-ibm (RHSA-2019:0469)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0469 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...
Critical: Red Hat Security Advisory: java-1.8.0-ibm security update
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
java-11-openjdk security update
1:11.0.2.7-0.0.1 - link atomic for ix86 build 1:11.0.2.7-0 - Update to shenandoah-jdk-11.0.2+7 January 2019 CPU - Make tagsuffix optional and comment it out while unused. - Drop JDK-8211105/RH1628612/RH1630996 applied upstream. - Drop JDK-8209639/RH1640127 applied upstream. - Re-generate...
[SECURITY] Fedora 29 Update: bouncycastle-1.61-1.fc29
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8...
Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affects IBM® Db2®.
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 6.0.16.70 and earlier, 6.1.8.70 and earlier, 7.0.10.30 and earlier, 7.1.4.30 and earlier, 8.0.5.22 and earlier used by IBM® Db2®. This issue was disclosed as part of the IBM Java SDK updates in October 2018. Vulnerability...
Security update for java-11-openjdk (important)
openSUSE Security Update: Security update for java-11-openjdk Announcement ID: openSUSE-SU-2019:0161-1 Rating: important References: 1120431 1122293 1122299 Cross-References: CVE-2018-11212 CVE-2019-2422 CVE-2019-2426 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilitie...
Security Bulletin: IBM i2 Intelligent Analyis Platform is affected by multiple vulnerabilities
Summary There are multiple vulnerabilities in IBM® Java SE distribution that are fixed in the October release. IBM i2 Enterprise Insight Analysis 2.1.8 and 2.2.0 are impacted by these Java Vulnerabilities. This security bulletin explains the issue and how to remediate it. In summary download the...
Arbitrary Code Execution
IBM JDK is vulnerable to arbitrary code execution. An insecure access restriction to the Attach API allows an attacker to connect to the affected resource and execute untrusted native code...
SUSE-SU-2019:0058-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support bsc1112142 - CVE-2018-3139: Better HTTP Redirection bsc1112143 - CVE-2018-3149: Enhance JNDI lookups bsc1112144 - CVE-2018-3169: Improve field accesses...
XML External Entity Reference (XXE) in jackson-databind
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity XXE attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization...
CVE-2018-14720
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity XXE attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization...
CVE-2018-14720
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity XXE attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization...
CVE-2018-14720
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity XXE attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization...
CVE-2018-14720
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity XXE attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization...
SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2018:3921-1)
java-171-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 35 bsc1116574 : Consumability - IJ10515 AIX JAVA 7.1.3.10 GENERAL PROTECTION FAULT WHEN ATTEMPTING TO USE HEALTH CENTER API Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932...
SUSE-SU-2018:3920-1 Security update for java-1_7_0-ibm
java-170-ibm is updated to Java 7.0 Service Refresh 10 Fix Pack 35 bsc1116574: Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932 CVE-2018-3149 - IJ10894 CVE-2018-3180 - IJ10933 CVE-2018-3214 - IJ09315 FLOATING POINT EXCEPTION FROM...
Security Bulletin: Security vulnerability related to Java SE (JDK) version 6 has been identified in the WebSphere Application Server where the Rational Asset Manager is deployed
Summary The Java SE JDK version 6.0 running on IBM WebSphere Application Server could allow a remote attacker to utilize the FormLogout servlet for redirecting to unauthorized hosts. This vulnerability can result in exploiting the WebSphere Application Server for potential spoofing. Vulnerability...
Oracle JRockit JDK R28.3.19 Multiple Vulnerabilities (October 2018 CPU)
The version of Oracle JRockit JDK installed on the remote Windows host is R28.3.19. It is, therefore, affected by multiple vulnerabilities. See advisory for details. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid118572; scriptversion"1.3"; scriptcvsdate"Date:...
RHEL 7 : java-1.8.0-oracle (RHSA-2018:3002)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3002 advisory. Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update upgrades...