Issued:
2019-03-05
Updated:
2019-03-05

RHSA-2019:0462 - Security Advisory

Synopsis

Moderate: java-1.7.0-openjdk security update

Type/Severity

Security Advisory: Moderate

Topic

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.

Security Fix(es):

  • OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290) (CVE-2019-2422)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of OpenJDK Java must be restarted for this update to take effect.

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64

Fixes

  • BZ - 1665945 - CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)

CVEs

References

Red Hat Enterprise Linux Server 6

SRPM
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.src.rpm SHA-256: 3586750b527896bc0a7332646e87a35f96ac959e4f1128f46c1affaeee96562a
x86_64
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: e24896c4c77899800317d0c31d882a27481d452eddbd62296bb75695861babcd
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 20e330f419b858a6ed2f5542414a6d9f253f044cb896733aacf347a057eaae5d
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 22e03d49a236b78c4ef280690e582dd472e0f0b7a38b105f3123206cc23a9b0b
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 92095c462d66d323dbb5b465c70844d900e1cb9bbe24a2e070bf50055ed83d7f
i386
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: df5ea43042e8161488b60825f82501d6e9af32a6938cebec479fe0c3bab790ac
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 82e6b8c6fa503397ba772fce38460dccd1ac153a88308dbb8587c56d46526512
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 26de7536c4fdc5259c332f16521d5cfdd79cdaa4bde5bf7db9d02c378673b877
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 467e67109cafb301e514c6e332622bd3ef1674ecd19cf8273542cd90ae2a76c0

Red Hat Enterprise Linux Workstation 6

SRPM
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.src.rpm SHA-256: 3586750b527896bc0a7332646e87a35f96ac959e4f1128f46c1affaeee96562a
x86_64
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: e24896c4c77899800317d0c31d882a27481d452eddbd62296bb75695861babcd
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 20e330f419b858a6ed2f5542414a6d9f253f044cb896733aacf347a057eaae5d
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 22e03d49a236b78c4ef280690e582dd472e0f0b7a38b105f3123206cc23a9b0b
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 92095c462d66d323dbb5b465c70844d900e1cb9bbe24a2e070bf50055ed83d7f
i386
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: df5ea43042e8161488b60825f82501d6e9af32a6938cebec479fe0c3bab790ac
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 82e6b8c6fa503397ba772fce38460dccd1ac153a88308dbb8587c56d46526512
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 26de7536c4fdc5259c332f16521d5cfdd79cdaa4bde5bf7db9d02c378673b877
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 467e67109cafb301e514c6e332622bd3ef1674ecd19cf8273542cd90ae2a76c0

Red Hat Enterprise Linux Desktop 6

SRPM
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.src.rpm SHA-256: 3586750b527896bc0a7332646e87a35f96ac959e4f1128f46c1affaeee96562a
x86_64
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: e24896c4c77899800317d0c31d882a27481d452eddbd62296bb75695861babcd
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 20e330f419b858a6ed2f5542414a6d9f253f044cb896733aacf347a057eaae5d
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 22e03d49a236b78c4ef280690e582dd472e0f0b7a38b105f3123206cc23a9b0b
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 92095c462d66d323dbb5b465c70844d900e1cb9bbe24a2e070bf50055ed83d7f
i386
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: df5ea43042e8161488b60825f82501d6e9af32a6938cebec479fe0c3bab790ac
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 98b085f92177671e03f3151ada38edcc188e14de2751e914086a2f18613badaa
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 82e6b8c6fa503397ba772fce38460dccd1ac153a88308dbb8587c56d46526512
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 26de7536c4fdc5259c332f16521d5cfdd79cdaa4bde5bf7db9d02c378673b877
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.i686.rpm SHA-256: 467e67109cafb301e514c6e332622bd3ef1674ecd19cf8273542cd90ae2a76c0

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.src.rpm SHA-256: 3586750b527896bc0a7332646e87a35f96ac959e4f1128f46c1affaeee96562a
x86_64
java-1.7.0-openjdk-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: e24896c4c77899800317d0c31d882a27481d452eddbd62296bb75695861babcd
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-debuginfo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: d1431d63cce1c967c4abb386824ad2bb8315e2ef6094c50688cba093acf4eb86
java-1.7.0-openjdk-demo-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 20e330f419b858a6ed2f5542414a6d9f253f044cb896733aacf347a057eaae5d
java-1.7.0-openjdk-devel-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 22e03d49a236b78c4ef280690e582dd472e0f0b7a38b105f3123206cc23a9b0b
java-1.7.0-openjdk-javadoc-1.7.0.211-2.6.17.1.el6_10.noarch.rpm SHA-256: 2919a6e461bbaa98faf593eadcdbe8370b4a3d28e855ea2db0ef2560c866672c
java-1.7.0-openjdk-src-1.7.0.211-2.6.17.1.el6_10.x86_64.rpm SHA-256: 92095c462d66d323dbb5b465c70844d900e1cb9bbe24a2e070bf50055ed83d7f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.