RHSA-2018:3001: Red Hat patches multiple Critical CVEs in OpenJDK/libpng

From the webpage screenshot, the following key vulnerability information can be obtained: Identification Information - Vulnerability Advisory Number: RHSA-2018:3001 Vulnerability Overview - Severity Level: Critical - Affected Product: java-1.7.0-oracle - Security Update Subject: Update for Oracle Java for Red Hat Enterprise Linux 7 Vulnerability Details - Security Fixes: - OpenJDK: Incorrect field access check (CVE-2018-3169) - OpenJDK: Incomplete implementation of trustURLCodebase restriction (CVE-2018-3149) - OpenJDK: Improper handling of unsigned attributes in signed JAR manifests (CVE-2018-3136) - OpenJDK: Leakage of sensitive header data via HTTP redirection (CVE-2018-3139) - OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (CVE-2018-3180) - OpenJDK: Infinite loop in RIFF format reader (CVE-2018-3214) - libpng: Integer overflow and subsequent division by zero (CVE-2018-13785) Solution - Refer to Red Hat’s update documentation (https://access.redhat.com/articles/11258) Affected Products - Oracle Java 7 in RHEL Server, Client, Compute Node, Workstation, and Extended Update Support across multiple versions Vulnerability Fix Sources (CVE) - Includes links to detailed CVE pages Reference Information - Link to Red Hat’s security update classification page (https://access.redhat.com/security/updates/classification/#critical) This information indicates multiple severe security vulnerabilities affecting OpenJDK and libpng. Red Hat has released updates to address these issues. Affected users are advised to apply the updates promptly to mitigate the risks.

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2018:3001: Red Hat patches multiple Critical CVEs in OpenJDK/libpng

More from this source