RHSA-2019:0469: Critical: java-1.8.0-ibm security update
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.<br>This update upgrades IBM Java SE 8 to version 8 SR5-FP30.<br>Security Fix(es):<br><li> IBM JDK: buffer overflow in jiosnprintf() and jiovsnprintf() (CVE-2018-12547)</li> <li> IBM JDK: missing null check when accelerating Unsafe calls (CVE-2018-12549)</li> <li> OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290) (CVE-2019-2422)</li> <li> libjpeg-turbo: Divide By Zero in allocsarray function in jmemmgr.c (CVE-2018-11212)</li> <li> Oracle JDK: unspecified vulnerability fixed in 8u201 (Deployment) (CVE-2019-2449)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID RHSA-2019:0469 about?
RHSA-2019:0469 addresses a security issue in IBM Java SE 8 related to a buffer overflow in jio_snprintf() and jio_vsnprintf(), identified as CVE-2018-12547.
What systems are affected by RHSA-2019:0469?
RHSA-2019:0469 affects multiple packages of IBM Java SE version 8, specifically versions prior to 1.8.0-ibm-1.8.0.5.30-1jpp.1.el6_10.
How do I fix the issues related to RHSA-2019:0469?
To remediate the issues related to RHSA-2019:0469, you should upgrade to IBM Java SE 8 version 1.8.0-ibm-1.8.0.5.30-1jpp.1.el6_10 or a later version.
What is the impact of the vulnerability identified in RHSA-2019:0469?
The vulnerability in RHSA-2019:0469 could allow a remote attacker to execute arbitrary code or crash the application due to buffer overflow.
Is there any mitigation available for RHSA-2019:0469 if I cannot immediately upgrade?
If you cannot immediately upgrade to a fixed version for RHSA-2019:0469, ensure that your environment has appropriate security controls in place to limit exposure to potential threats.