REDHAT-BUG-1639755: Medium severity openjdk vulnerability

Published Oct 16, 2018

Updated

It was discovered that the Security component of OpenJDK could incorrectly use unsigned manifest attribute entries when only properly signed entries were meant to be used. This could lead to bypass of protections provided by Jar signing. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Oct 16, 2018

Data Sourced

via Red Hat·01:49 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1639755?

The severity of REDHAT-BUG-1639755 is considered high due to its potential to bypass Jar signing protections.

How do I fix REDHAT-BUG-1639755?

To fix REDHAT-BUG-1639755, you should update OpenJDK to the latest version provided by your distribution.

What impact does REDHAT-BUG-1639755 have on applications?

REDHAT-BUG-1639755 allows untrusted Java applications to potentially execute unauthorized code by bypassing security checks.

When was REDHAT-BUG-1639755 first reported?

REDHAT-BUG-1639755 was first reported as a vulnerability in 2018.

Is REDHAT-BUG-1639755 applicable to all OpenJDK versions?

REDHAT-BUG-1639755 affects specific versions of OpenJDK, so checking your version against security advisories is crucial.