- Vulnerability/
- RHSA-2016:1039
RHSA-2016:1039: Critical: java-1.8.0-ibm security update
First published: Wed May 11 2016(Updated: )
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.<br>This update upgrades IBM Java SE 8 to version 8 SR3.<br>Security Fix(es):<br><li> This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security alerts page, listed in the References section. (CVE-2016-0264, CVE-2016-0363, CVE-2016-0376, CVE-2016-0686, CVE-2016-0687, CVE-2016-3422, CVE-2016-3426, CVE-2016-3427, CVE-2016-3443, CVE-2016-3449)</li>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/java | <1.8.0-ibm-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-demo-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-demo-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-devel-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-devel-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-jdbc-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-jdbc-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-plugin-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-plugin-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-src-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-src-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-demo-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-demo-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-devel-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-devel-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-jdbc-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-jdbc-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-plugin-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-plugin-1.8.0.3.0-1jpp.1.el6 |
| redhat/java | <1.8.0-ibm-src-1.8.0.3.0-1jpp.1.el6 | 1.8.0-ibm-src-1.8.0.3.0-1jpp.1.el6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1324044
- https://bugzilla.redhat.com/show_bug.cgi?id=1327743
- https://bugzilla.redhat.com/show_bug.cgi?id=1327749
- https://bugzilla.redhat.com/show_bug.cgi?id=1328059
- https://bugzilla.redhat.com/show_bug.cgi?id=1328210
- https://bugzilla.redhat.com/show_bug.cgi?id=1328618
- https://bugzilla.redhat.com/show_bug.cgi?id=1328619
- https://bugzilla.redhat.com/show_bug.cgi?id=1328620
- https://bugzilla.redhat.com/show_bug.cgi?id=1330986
- https://bugzilla.redhat.com/show_bug.cgi?id=1331359
- http://www.redhat.com/security/updates/classification/#normal
- https://access.redhat.com/errata/RHSA-2016:1039 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2016:1039?
The severity of RHSA-2016:1039 is moderate due to vulnerabilities in IBM Java SE that could allow an attacker to execute arbitrary code.
How do I fix RHSA-2016:1039?
To fix RHSA-2016:1039, upgrade to IBM Java SE version 8 SR3 or later, specifically versions at or above 1.8.0-ibm-1.8.0.3.0-1jpp.1.el6.
Which versions of IBM Java SE are affected by RHSA-2016:1039?
RHSA-2016:1039 affects all versions of IBM Java SE prior to 1.8.0-ibm-1.8.0.3.0-1jpp.1.el6.
What functionality does RHSA-2016:1039 pertain to?
RHSA-2016:1039 pertains to security vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit.
Is it safe to use IBM Java SE versions prior to RHSA-2016:1039?
It is not safe to use IBM Java SE versions prior to RHSA-2016:1039 as these versions contain known security vulnerabilities that could be exploited.
- collector/redhat-errata
- anchor-id/RHSA-2016:1039
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- package-manager/redhat