Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.6
Oracle Java 1.7 on Red Hat Systems at Risk of Remote Execution
published 2 years ago
Summary
A security update is available for Oracle Java 1.7 on Red Hat systems. This update fixes a critical vulnerability that could allow an attacker to execute malicious code remotely on affected systems. We recommend updating to the latest version to ensure the security of your systems.
What to do
- Update redhat java-1.7.0-openjdk to version 1:1.7.0.181-2.6.14.8.el6_9.
- Update redhat java-1.7.0-openjdk-debuginfo to version 1:1.7.0.181-2.6.14.8.el6_9.
- Update redhat java-1.7.0-openjdk-demo to version 1:1.7.0.181-2.6.14.8.el6_9.
- Update redhat java-1.7.0-openjdk-devel to version 1:1.7.0.181-2.6.14.8.el6_9.
- Update redhat java-1.7.0-openjdk-javadoc to version 1:1.7.0.181-2.6.14.8.el6_9.
- Update redhat java-1.7.0-openjdk-src to version 1:1.7.0.181-2.6.14.8.el6_9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:6::client | redhat | java-1.7.0-openjdk |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::client | redhat | java-1.7.0-openjdk-debuginfo |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::client | redhat | java-1.7.0-openjdk-demo |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::client | redhat | java-1.7.0-openjdk-devel |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::client | redhat | java-1.7.0-openjdk-javadoc |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::client | redhat | java-1.7.0-openjdk-src |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::computenode | redhat | java-1.7.0-openjdk |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::computenode | redhat | java-1.7.0-openjdk-debuginfo |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::computenode | redhat | java-1.7.0-openjdk-demo |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::computenode | redhat | java-1.7.0-openjdk-devel |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::computenode | redhat | java-1.7.0-openjdk-javadoc |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::computenode | redhat | java-1.7.0-openjdk-src |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::server | redhat | java-1.7.0-openjdk |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::server | redhat | java-1.7.0-openjdk-debuginfo |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::server | redhat | java-1.7.0-openjdk-demo |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::server | redhat | java-1.7.0-openjdk-devel |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::server | redhat | java-1.7.0-openjdk-javadoc |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::server | redhat | java-1.7.0-openjdk-src |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::workstation | redhat | java-1.7.0-openjdk |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::workstation | redhat | java-1.7.0-openjdk-debuginfo |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::workstation | redhat | java-1.7.0-openjdk-demo |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::workstation | redhat | java-1.7.0-openjdk-devel |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::workstation | redhat | java-1.7.0-openjdk-javadoc |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
| Red Hat:enterprise_linux:6::workstation | redhat | java-1.7.0-openjdk-src |
< 1:1.7.0.181-2.6.14.8.el6_9 Fix: upgrade to 1:1.7.0.181-2.6.14.8.el6_9
|
Original advisory text
Red Hat Security Advisory: java-1.7.0-openjdk security update
References
- https://access.redhat.com/errata/RHSA-2018:1647 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/ssbd Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1566890 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1647.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2018-3639 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2018-3639 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-3639 Vendor Advisory
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1528 Third Party Advisory
- https://software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analys... Third Party Advisory
- https://software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-... Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.... Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published29 Sep 2024
Updated30 May 2026
First seen30 May 2026
Sources
RHSA-2018:1647 · OSV
Track software like this
Free during beta