Red Hat Product Errata RHSA-2019:0462 - Security Advisory

Issued:: 2019-03-05
Updated:: 2019-03-05

RHSA-2019:0462 - Security Advisory

Overview
Updated Packages

Synopsis

Moderate: java-1.7.0-openjdk security update

Type/Severity

Security Advisory: Moderate

Topic

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.

Security Fix(es):

OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290) (CVE-2019-2422)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of OpenJDK Java must be restarted for this update to take effect.

Affected Products

Red Hat Enterprise Linux Server 6 x86_64
Red Hat Enterprise Linux Server 6 i386
Red Hat Enterprise Linux Workstation 6 x86_64
Red Hat Enterprise Linux Workstation 6 i386
Red Hat Enterprise Linux Desktop 6 x86_64
Red Hat Enterprise Linux Desktop 6 i386
Red Hat Enterprise Linux for Scientific Computing 6 x86_64

Fixes

BZ - 1665945 - CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)

CVEs

CVE-2019-2422

References

https://access.redhat.com/security/updates/classification/#moderate

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 6

SRPM
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.src.rpm	SHA-256: 3586750b527896bc0a7332646e87a35f96ac959e4f1128f46c1affaeee96562a
x86_64
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: e24896c4c77899800317d0c31d882a27481d452eddbd62296bb75695861babcd
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 20e330f419b858a6ed2f5542414a6d9f253f044cb896733aacf347a057eaae5d
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 22e03d49a236b78c4ef280690e582dd472e0f0b7a38b105f3123206cc23a9b0b
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm	SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 92095c462d66d323dbb5b465c70844d900e1cb9bbe24a2e070bf50055ed83d7f
i386
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: df5ea43042e8161488b60825f82501d6e9af32a6938cebec479fe0c3bab790ac
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 82e6b8c6fa503397ba772fce38460dccd1ac153a88308dbb8587c56d46526512
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 26de7536c4fdc5259c332f16521d5cfdd79cdaa4bde5bf7db9d02c378673b877
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm	SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 467e67109cafb301e514c6e332622bd3ef1674ecd19cf8273542cd90ae2a76c0

Red Hat Enterprise Linux Workstation 6

SRPM
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.src.rpm	SHA-256: 3586750b527896bc0a7332646e87a35f96ac959e4f1128f46c1affaeee96562a
x86_64
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: e24896c4c77899800317d0c31d882a27481d452eddbd62296bb75695861babcd
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 20e330f419b858a6ed2f5542414a6d9f253f044cb896733aacf347a057eaae5d
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 22e03d49a236b78c4ef280690e582dd472e0f0b7a38b105f3123206cc23a9b0b
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm	SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 92095c462d66d323dbb5b465c70844d900e1cb9bbe24a2e070bf50055ed83d7f
i386
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: df5ea43042e8161488b60825f82501d6e9af32a6938cebec479fe0c3bab790ac
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 82e6b8c6fa503397ba772fce38460dccd1ac153a88308dbb8587c56d46526512
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 26de7536c4fdc5259c332f16521d5cfdd79cdaa4bde5bf7db9d02c378673b877
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm	SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 467e67109cafb301e514c6e332622bd3ef1674ecd19cf8273542cd90ae2a76c0

Red Hat Enterprise Linux Desktop 6

SRPM
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.src.rpm	SHA-256: 3586750b527896bc0a7332646e87a35f96ac959e4f1128f46c1affaeee96562a
x86_64
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: e24896c4c77899800317d0c31d882a27481d452eddbd62296bb75695861babcd
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 20e330f419b858a6ed2f5542414a6d9f253f044cb896733aacf347a057eaae5d
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 22e03d49a236b78c4ef280690e582dd472e0f0b7a38b105f3123206cc23a9b0b
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm	SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 92095c462d66d323dbb5b465c70844d900e1cb9bbe24a2e070bf50055ed83d7f
i386
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: df5ea43042e8161488b60825f82501d6e9af32a6938cebec479fe0c3bab790ac
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 82e6b8c6fa503397ba772fce38460dccd1ac153a88308dbb8587c56d46526512
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 26de7536c4fdc5259c332f16521d5cfdd79cdaa4bde5bf7db9d02c378673b877
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm	SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.i686.rpm	SHA-256: 467e67109cafb301e514c6e332622bd3ef1674ecd19cf8273542cd90ae2a76c0

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.src.rpm	SHA-256: 3586750b527896bc0a7332646e87a35f96ac959e4f1128f46c1affaeee96562a
x86_64
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: e24896c4c77899800317d0c31d882a27481d452eddbd62296bb75695861babcd
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 20e330f419b858a6ed2f5542414a6d9f253f044cb896733aacf347a057eaae5d
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 22e03d49a236b78c4ef280690e582dd472e0f0b7a38b105f3123206cc23a9b0b
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm	SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm	SHA-256: 92095c462d66d323dbb5b465c70844d900e1cb9bbe24a2e070bf50055ed83d7f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Log in to Your Red Hat Account

Red Hat Account

Customer Portal

Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation

Services

Tools

Red Hat Insights

Red Hat Product Security Center

Security Updates

Resources

Customer Portal Community

Customer Events

Stories