CWE
190
Advisory Published
Advisory Published

RHSA-2018:3008: Important: java-1.6.0-sun security update

First published: Wed Oct 24 2018(Updated: )

Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.<br>This update upgrades Oracle Java SE 6 to version 6 Update 211.<br>Security Fix(es):<br><li> OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177) (CVE-2018-3149)</li> <li> Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)</li> <li> OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)</li> <li> Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)</li> <li> OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534) (CVE-2018-3136)</li> <li> OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902) (CVE-2018-3139)</li> <li> OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613) (CVE-2018-3180)</li> <li> OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361) (CVE-2018-3214)</li> <li> libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service (CVE-2018-13785)</li> For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Affected SoftwareAffected VersionHow to fix
Oracle Java SE 7

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of RHSA-2018:3008?

    RHSA-2018:3008 is classified as a moderate severity vulnerability.

  • How do I fix RHSA-2018:3008?

    To fix RHSA-2018:3008, upgrade Oracle Java SE 6 to version 6 Update 211.

  • What systems are affected by RHSA-2018:3008?

    RHSA-2018:3008 affects systems running Oracle Java SE version 6.

  • What type of vulnerability is addressed in RHSA-2018:3008?

    RHSA-2018:3008 addresses an incomplete enforcement of the trustURLCodebase restriction.

  • Is it necessary to reboot after applying the fix for RHSA-2018:3008?

    Yes, a system reboot may be required to complete the fix for RHSA-2018:3008.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203