Mar 7, 2019 9:01 am EST
Categorized: High Severity
Share this post:
Java SE issues disclosed in the Oracle January 2019 Critical Patch Update, plus three additional vulnerabilities
CVE(s): CVE-2018-11212, CVE-2019-2426, CVE-2019-2449, CVE-2019-2422, CVE-2018-12547, CVE-2018-12549, CVE-2018-1890
Affected product(s) and affected version(s):
IBM SDK, Java Technology Edition, Version 7 Service Refresh 10 Fix Pack 35 and earlier releases
IBM SDK, Java Technology Edition, Version 7R1 Service Refresh 4 Fix Pack 35 and earlier releases
IBM SDK, Java Technology Edition, Version 8 Service Refresh 5 Fix Pack 27 and earlier releases
Note 1: CVE-2018-12547 and CVE-2018-12549 do not apply to IBM SDK, Java Technology Edition on Solaris, HP-UX and Mac OS. Note 2: CVE-2018-12549 only applies to IBM SDK, Java Technology Edition, Version 8 Service Refresh 5 to IBM SDK, Java Technology Edition, Version 8 Service Refresh 5 Fix Pack 27 (inclusive) Note 3: CVE-2018-1890 only applies to IBM SDK, Java Technology Edition on AIX.
For detailed information on which CVEs affect which releases, please refer to the IBM SDK, Java Technology Edition Security Vulnerabilities page .
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www.ibm.com/support/docview.wss?uid=ibm10873332
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143429
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/155744
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/155766
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/155741
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/157512
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/157513
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152081
from IBM Product Security Incident Response Team https://ift.tt/2UwYZ3m
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.