What is the severity of RHSA-2019:3157?

The severity of RHSA-2019:3157 is classified as moderate.

How do I fix RHSA-2019:3157?

To fix RHSA-2019:3157, you should update to the latest package version, specifically 1.7.0-openjdk-1.7.0.241-2.6.20.0.el7_7.

What vulnerabilities does RHSA-2019:3157 address?

RHSA-2019:3157 addresses vulnerabilities related to the incorrect handling of nested jar: URLs in the Jar URL handler.

What affected software versions are involved with RHSA-2019:3157?

RHSA-2019:3157 affects multiple versions of the java-1.7.0-openjdk packages including 1.7.0-openjdk-1.7.0.241-2.6.20.0.el7_7.

Is RHSA-2019:3157 related to any specific CVE?

Yes, RHSA-2019:3157 is related to CVE-2019-2978, which involves an issue with OpenJDK.

Vulnerability/
RHSA-2019:3157

CWE

190 476

21/10/2019

19/5/2024

RHSA-2019:3157: Moderate: java-1.7.0-openjdk security update

First published: Mon Oct 21 2019(Updated: )

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.<br>Security Fix(es):<br><li> OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978)</li> <li> OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989)</li> <li> OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945)</li> <li> OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962)</li> <li> OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) (CVE-2019-2964)</li> <li> OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) (CVE-2019-2973)</li> <li> OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) (CVE-2019-2981)</li> <li> OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) (CVE-2019-2983)</li> <li> OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) (CVE-2019-2987)</li> <li> OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988)</li> <li> OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992)</li> <li> OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Never miss a vulnerability like this again

Reference Links

https://access.redhat.com/errata/RHSA-2019:3157 (Advisory)

Frequently Asked Questions

What is the severity of RHSA-2019:3157?
The severity of RHSA-2019:3157 is classified as moderate.
How do I fix RHSA-2019:3157?
To fix RHSA-2019:3157, you should update to the latest package version, specifically 1.7.0-openjdk-1.7.0.241-2.6.20.0.el7_7.
What vulnerabilities does RHSA-2019:3157 address?
RHSA-2019:3157 addresses vulnerabilities related to the incorrect handling of nested jar: URLs in the Jar URL handler.
What affected software versions are involved with RHSA-2019:3157?
RHSA-2019:3157 affects multiple versions of the java-1.7.0-openjdk packages including 1.7.0-openjdk-1.7.0.241-2.6.20.0.el7_7.
Is RHSA-2019:3157 related to any specific CVE?
Yes, RHSA-2019:3157 is related to CVE-2019-2978, which involves an issue with OpenJDK.

agent/weakness
agent/severity
agent/type
agent/first-publish-date
agent/softwarecombine
agent/last-modified-date
agent/description
agent/title
agent/references
agent/remedy
agent/event
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2019:3157
agent/software-canonical-lookup
agent/trending
agent/tags
agent/source
package-manager/redhat