RHSA-2018:2255: Critical: java-1.7.0-oracle security update

Published Jul 24, 2018

Updated

Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.<br>This update upgrades Oracle Java SE 7 to version 7 Update 191.<br>Security Fix(es):<br><li> Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)</li> <li> Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)</li> <li> OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)</li> <li> Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)</li> For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Oracle Java Se

Remediation

Event History

Jan 30, 2025

Advisory Published

via Red Hat·01:15 AM

Data Sourced

via Red Hat·01:15 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2018:2255?

The severity of RHSA-2018:2255 is considered moderate due to the unspecified vulnerabilities in Oracle Java SE 7.

How do I fix RHSA-2018:2255?

To fix RHSA-2018:2255, upgrade Oracle Java SE to version 7 Update 191 or later.

Which versions of Oracle Java SE are affected by RHSA-2018:2255?

RHSA-2018:2255 affects Oracle Java SE version 7 prior to Update 191.

What are the updates included in RHSA-2018:2255?

RHSA-2018:2255 includes security updates for Oracle Java SE 7, specifically fixing vulnerabilities in version 7u191.

Is RHSA-2018:2255 applicable to both JDK and JRE?

Yes, RHSA-2018:2255 is applicable to both the Oracle Java Runtime Environment and the Oracle Java Development Kit.