Security Advisory Critical: java-1.8.0-ibm security update

Advisory: RHSA-2017:0263-1
Type: Security Advisory
Severity: Critical
Issued on: 2017-02-09
Last updated on: 2017-02-09
Affected Products: Red Hat Enterprise Linux Desktop Supplementary (v. 6)
Red Hat Enterprise Linux Desktop Supplementary (v. 7)
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
Red Hat Enterprise Linux HPC Node Supplementary (v. 7)
Red Hat Enterprise Linux Server Supplementary (v. 6)
Red Hat Enterprise Linux Server Supplementary (v. 7)
Red Hat Enterprise Linux Workstation Supplementary (v. 6)
Red Hat Enterprise Linux Workstation Supplementary (v. 7)
CVEs (cve.mitre.org): CVE-2016-5546
CVE-2016-5547
CVE-2016-5548
CVE-2016-5549
CVE-2016-5552
CVE-2017-3231
CVE-2017-3241
CVE-2017-3252
CVE-2017-3253
CVE-2017-3259
CVE-2017-3261
CVE-2017-3272
CVE-2017-3289

Details

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6
Supplementary and Red Hat Enterprise Linux 7 Supplementary.

Red Hat Product Security has rated this update as having a security impact of
Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a
detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java
Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR4.

Security Fix(es):

* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment
and the IBM Java Software Development Kit. Further information about these flaws
can be found on the IBM Java Security alerts page, listed in the References
section. (CVE-2016-5546, CVE-2016-5547, CVE-2016-5548, CVE-2016-5549,
CVE-2016-5552, CVE-2017-3231, CVE-2017-3241, CVE-2017-3252, CVE-2017-3253,
CVE-2017-3259, CVE-2017-3261, CVE-2017-3272, CVE-2017-3289)


Solution

For details on how to apply this update, which includes the changes described in
this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take
effect.

Updated packages

Red Hat Enterprise Linux Desktop Supplementary (v. 6)

IA-32:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 6f809a02392fee4e6039f1a923c8a251
SHA-256: efe8851ac8c9bb50f0ae0fc798e2b995e3390d0696ae34b4e45b06f3ff716609
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2c910d7faf3eb4eb6c70f0e0b1bf92fb
SHA-256: 6c0e645e029bf2ae1d29c31d0b1d217b1b2edf9749b90a59e4bd8e6749b183a4
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 79c27378d38bd58f2cb6ee63abd2bda0
SHA-256: 472a3c02140ebae5aa892f2b6d06e7134547e98c714e6d3be76aee611c979a38
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: a818d99d52e5878547bdb39387b9592a
SHA-256: 59d998168bc00ac14b9b53aef97c7d940935b9a3a962bf510fe301217b34cb5b
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: a1cf1c3c29bbd2521f0b71b8b770dbc8
SHA-256: cd056527c0d25f7c1289716d1bff575069ce89182bc93574f92c18724dc3d566
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 4586f55faacddaefec8e91afebe94c99
SHA-256: d5b207e2c15a38a9898b0dea7b2b02ce4d18b30e45f71616986807cd92c22594
 
x86_64:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: a91a0b39bf564ae44615589d4c4fcd8e
SHA-256: 8a856c42d75bb51eaadb3d164506b9c7fc090e30e6ea3f79d1d3648d1621d763
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 68b3ff56d157d0d7cf968a6b7b9a2f94
SHA-256: 27fed8215f484d629b0feb7b44a0b560bb27a281ab8e1cc11af57e3b9da13666
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: ed10a7390f719ba037d46078512ef30f
SHA-256: 9c57ef4a210c4cd8ba031f055753de2cb7f07d6635018536fac79d9d39d3add3
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 40db69a9a0f982f6199e3b1337bcb88f
SHA-256: f5042f592e1cb2a55e26fbb7880c5f73c3698606ce479f217eb076f87a3ecbc4
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: f38da2745963fef323239b9b8bf0d1cf
SHA-256: 63d120022f71dc9f1b052a399497eae652c8dcce65350042e245171e2ca5d1d7
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2819fc4368fa0bb2fa2129a50cb1be49
SHA-256: 6344ac0a1d641467e0baf3838efc05e663034f46777f48fa1588ad682644583d
 
Red Hat Enterprise Linux Desktop Supplementary (v. 7)

x86_64:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: fa64ecfd910c1a90c86b5c41bbf5b021
SHA-256: 05de1d32323a266aa52289cf482e16b7a5129fcd61409f6df1505a8286fb9af4
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 1a8a64b7fd720c339e4f7699c2bf0604
SHA-256: e01ebadaeef56bf29644a7192e5b389042d9f35da994c7dcdcb545f756344541
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 423606d10ab0fd05b96aa37d7c0277d3
SHA-256: 70783530fa08bec38592ff1f64ab6edec5bba3fc8881193226de248aff7ca7ef
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 5a662675d3a2862ca6188b8e419dbb60
SHA-256: 6febbcb0daf9726722286b5d17d192e68a07262c6c2446a9a9750e4393294a16
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: f7635aa1c15519876d8a7ab3111689ec
SHA-256: ea15cb0fc3661eacbb1dc94a85216e2f65f997a127c55cf703417afc8cc82d83
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 45344b341b2cefd7f367c752a63c46f9
SHA-256: 71a83db8f1b4b42be5f33998008bbdec61906c07f2521b68fd951f8efbb8210c
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 3a80ccd9e691b682910af13cc4c41104
SHA-256: 85e47c274b47b1bd536c0442094de16b2bce50ece515c2ebc3e3a08f0b46c6fd
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 4cfdf28ce0e3a6b09129a1a8a7d17def
SHA-256: 84ebe7b9a2860b7e1095ee93420ba1424a3cf91f6574faa87673e6361b0ba4f2
 
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)

x86_64:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: a91a0b39bf564ae44615589d4c4fcd8e
SHA-256: 8a856c42d75bb51eaadb3d164506b9c7fc090e30e6ea3f79d1d3648d1621d763
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 68b3ff56d157d0d7cf968a6b7b9a2f94
SHA-256: 27fed8215f484d629b0feb7b44a0b560bb27a281ab8e1cc11af57e3b9da13666
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: ed10a7390f719ba037d46078512ef30f
SHA-256: 9c57ef4a210c4cd8ba031f055753de2cb7f07d6635018536fac79d9d39d3add3
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2819fc4368fa0bb2fa2129a50cb1be49
SHA-256: 6344ac0a1d641467e0baf3838efc05e663034f46777f48fa1588ad682644583d
 
Red Hat Enterprise Linux HPC Node Supplementary (v. 7)

x86_64:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: fa64ecfd910c1a90c86b5c41bbf5b021
SHA-256: 05de1d32323a266aa52289cf482e16b7a5129fcd61409f6df1505a8286fb9af4
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 1a8a64b7fd720c339e4f7699c2bf0604
SHA-256: e01ebadaeef56bf29644a7192e5b389042d9f35da994c7dcdcb545f756344541
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 423606d10ab0fd05b96aa37d7c0277d3
SHA-256: 70783530fa08bec38592ff1f64ab6edec5bba3fc8881193226de248aff7ca7ef
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 5a662675d3a2862ca6188b8e419dbb60
SHA-256: 6febbcb0daf9726722286b5d17d192e68a07262c6c2446a9a9750e4393294a16
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: f7635aa1c15519876d8a7ab3111689ec
SHA-256: ea15cb0fc3661eacbb1dc94a85216e2f65f997a127c55cf703417afc8cc82d83
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 4cfdf28ce0e3a6b09129a1a8a7d17def
SHA-256: 84ebe7b9a2860b7e1095ee93420ba1424a3cf91f6574faa87673e6361b0ba4f2
 
Red Hat Enterprise Linux Server Supplementary (v. 6)

IA-32:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 6f809a02392fee4e6039f1a923c8a251
SHA-256: efe8851ac8c9bb50f0ae0fc798e2b995e3390d0696ae34b4e45b06f3ff716609
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2c910d7faf3eb4eb6c70f0e0b1bf92fb
SHA-256: 6c0e645e029bf2ae1d29c31d0b1d217b1b2edf9749b90a59e4bd8e6749b183a4
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 79c27378d38bd58f2cb6ee63abd2bda0
SHA-256: 472a3c02140ebae5aa892f2b6d06e7134547e98c714e6d3be76aee611c979a38
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: a818d99d52e5878547bdb39387b9592a
SHA-256: 59d998168bc00ac14b9b53aef97c7d940935b9a3a962bf510fe301217b34cb5b
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: a1cf1c3c29bbd2521f0b71b8b770dbc8
SHA-256: cd056527c0d25f7c1289716d1bff575069ce89182bc93574f92c18724dc3d566
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 4586f55faacddaefec8e91afebe94c99
SHA-256: d5b207e2c15a38a9898b0dea7b2b02ce4d18b30e45f71616986807cd92c22594
 
PPC:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: d2a359e699b7d3c3602dd0c732661625
SHA-256: e8d7d833290177e313c5227474b1ad89ffef909bf049fb984c0e09920d181fb4
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 38db5c763660fa79f05611396562fc69
SHA-256: b38d5f307000a947d94f1bc58f1f22f6f22e9b0241f661c236b7a5c1c4589bfe
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: a4528ab7b5258a2127aaf91f7a42974a
SHA-256: 7ae186de88ea9171f931a6adda1ab037b8875f5070514e244a5b91e964fb23b8
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el6_8.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: c907503052d5b35e4fd528a3d5c24395
SHA-256: f7db0bf1978837467b3c35fb6c0a041ad41078938bf4391ce52eeb7750b49d84
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 5569f1b7d8e18e1d3977bd1a19f31d8a
SHA-256: 8073b2a7d5546a4b10b8e3e6c7f6e2c9a4b28e0da8e416634ab54a25e86d3208
 
s390x:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: b7c13d17fe69bc7fe100f5d031cc2748
SHA-256: 61e007aa9aaf8f215628de37f3a43e701858ccc339342dca641118847d8147ff
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: 6d94ccda27583ce69fcde8e9b60745a6
SHA-256: 77f2faac8b699f030aec36b3a67fff2452586d49a01acfe90fafac4bfe34a554
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: d2a6226eba2bfd4163f67caa17aa0a61
SHA-256: f1fd145b81e0c66b9f8753ef695df40dcaf95496255ff18ba0109980d00438d1
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el6_8.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: a789faf163d32671589faad0dc70bcac
SHA-256: 55d4538f7a322ab3e0f5dc78ba6f2d94360ba0f2c718607dca458ba2a80331c7
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: 06353add2734dc2a1388b6cbfc05428b
SHA-256: 6a445d2c178c5eab64742f29d0978e99db8db7956783b4f87b300bd747c14cf8
 
x86_64:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: a91a0b39bf564ae44615589d4c4fcd8e
SHA-256: 8a856c42d75bb51eaadb3d164506b9c7fc090e30e6ea3f79d1d3648d1621d763
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 68b3ff56d157d0d7cf968a6b7b9a2f94
SHA-256: 27fed8215f484d629b0feb7b44a0b560bb27a281ab8e1cc11af57e3b9da13666
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: ed10a7390f719ba037d46078512ef30f
SHA-256: 9c57ef4a210c4cd8ba031f055753de2cb7f07d6635018536fac79d9d39d3add3
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 40db69a9a0f982f6199e3b1337bcb88f
SHA-256: f5042f592e1cb2a55e26fbb7880c5f73c3698606ce479f217eb076f87a3ecbc4
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: f38da2745963fef323239b9b8bf0d1cf
SHA-256: 63d120022f71dc9f1b052a399497eae652c8dcce65350042e245171e2ca5d1d7
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2819fc4368fa0bb2fa2129a50cb1be49
SHA-256: 6344ac0a1d641467e0baf3838efc05e663034f46777f48fa1588ad682644583d
 
Red Hat Enterprise Linux Server Supplementary (v. 7)

PPC:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.ppc.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2a114dacfeba54dac9972d4aee77b39a
SHA-256: d38331058ca372af26e61ccfd8e5fc7b24272977c070bd0f841de85c28d5be07
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: db8b7d983ee005b2d31ccb9a70db7e91
SHA-256: dac65dc9f5ca0431ced56336fea42c5224b1ae03c76fb5551047fb934992eac2
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el7.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 37244b6cbf0a558688e8bdfb92501e17
SHA-256: 2acdfb282834039c73868b425e6450b480a84cef457c9002cdd5ade4d8111110
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.ppc.rpm
File outdated by:  RHSA-2017:1220
    MD5: 02d8c5f280f9b19fa78ce728fc8316a3
SHA-256: 4ac7e32a0e1cc175685506ad41eb9c54b9d9c5a358f0747c93a46c1066ce04f0
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 1ff7ba6f168e464011ad18f191531bb2
SHA-256: a9429198ebffa8f964e23e1854346e07cbed33bae4b5ab2e79f405006f807768
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el7.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 3798c0c5f9290af1cf1dcc1873a0676e
SHA-256: e10f0947d323a875fa8e370f9d5a425cbe6fe01cf01d98cd11eecda0bfdd3196
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el7.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: f42ff8e3a9f200966ef049b8e193749a
SHA-256: 245d02f7add0a64542a084595747052ac089af278c206547a122c002039d8960
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el7.ppc64.rpm
File outdated by:  RHSA-2017:1220
    MD5: d3eed2467cc8caa85b18ae81d848ef70
SHA-256: 7b43da56e43a1facd57d3ee003033eb75358244aad34c78e9801e8eb660eafb0
 
s390x:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.s390.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2d4e482b1cf4b59da902df4fc66ada44
SHA-256: 6fdc483611475c6a4beefec6f790175f5d879976befda10d09def373ec72b92a
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: 10f8ae447740c0809c49d7f96c3661b1
SHA-256: df374853bb89ccd9917aedbea238060db9c9128e7102d9cfdc3f7c3797544766
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el7.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: d463c98f579e8903388dda644c2ae50f
SHA-256: f4069a9d38c7c6a07dc9c9e19607a6d85f15f2ef9ff8bccfb993220870301204
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.s390.rpm
File outdated by:  RHSA-2017:1220
    MD5: d4ffc07b3cc4a59efd4479aa3a0802a5
SHA-256: 4887bc6ebc648c64c0fb719a1fd0aa0dcc2d0a4b1f29220cb3dc6d3d79a6efc7
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: 0fbda3467bbb36bf9e1ef64d4be1c4d9
SHA-256: cb744d0f6abefe7afd4fbc8766ea2f1b8b42d0d2a9ff15a084c2c83f8836c668
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el7.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: b5666bb471b769d542427d554d6b0f96
SHA-256: 5ae28051b309d66827fd0223772759a13174348709438e3da3ccb3bc47fa2bbe
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el7.s390x.rpm
File outdated by:  RHSA-2017:1220
    MD5: 74a6b1bd3c53da2388beb1a4c24fcc03
SHA-256: aacb083c4c4e93dc79506a1ded640ea361ad1ca5f5137095cf3d654f1a8916ea
 
x86_64:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: fa64ecfd910c1a90c86b5c41bbf5b021
SHA-256: 05de1d32323a266aa52289cf482e16b7a5129fcd61409f6df1505a8286fb9af4
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 1a8a64b7fd720c339e4f7699c2bf0604
SHA-256: e01ebadaeef56bf29644a7192e5b389042d9f35da994c7dcdcb545f756344541
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 423606d10ab0fd05b96aa37d7c0277d3
SHA-256: 70783530fa08bec38592ff1f64ab6edec5bba3fc8881193226de248aff7ca7ef
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 5a662675d3a2862ca6188b8e419dbb60
SHA-256: 6febbcb0daf9726722286b5d17d192e68a07262c6c2446a9a9750e4393294a16
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: f7635aa1c15519876d8a7ab3111689ec
SHA-256: ea15cb0fc3661eacbb1dc94a85216e2f65f997a127c55cf703417afc8cc82d83
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 45344b341b2cefd7f367c752a63c46f9
SHA-256: 71a83db8f1b4b42be5f33998008bbdec61906c07f2521b68fd951f8efbb8210c
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 3a80ccd9e691b682910af13cc4c41104
SHA-256: 85e47c274b47b1bd536c0442094de16b2bce50ece515c2ebc3e3a08f0b46c6fd
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 4cfdf28ce0e3a6b09129a1a8a7d17def
SHA-256: 84ebe7b9a2860b7e1095ee93420ba1424a3cf91f6574faa87673e6361b0ba4f2
 
Red Hat Enterprise Linux Workstation Supplementary (v. 6)

IA-32:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 6f809a02392fee4e6039f1a923c8a251
SHA-256: efe8851ac8c9bb50f0ae0fc798e2b995e3390d0696ae34b4e45b06f3ff716609
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2c910d7faf3eb4eb6c70f0e0b1bf92fb
SHA-256: 6c0e645e029bf2ae1d29c31d0b1d217b1b2edf9749b90a59e4bd8e6749b183a4
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 79c27378d38bd58f2cb6ee63abd2bda0
SHA-256: 472a3c02140ebae5aa892f2b6d06e7134547e98c714e6d3be76aee611c979a38
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: a818d99d52e5878547bdb39387b9592a
SHA-256: 59d998168bc00ac14b9b53aef97c7d940935b9a3a962bf510fe301217b34cb5b
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: a1cf1c3c29bbd2521f0b71b8b770dbc8
SHA-256: cd056527c0d25f7c1289716d1bff575069ce89182bc93574f92c18724dc3d566
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 4586f55faacddaefec8e91afebe94c99
SHA-256: d5b207e2c15a38a9898b0dea7b2b02ce4d18b30e45f71616986807cd92c22594
 
x86_64:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: a91a0b39bf564ae44615589d4c4fcd8e
SHA-256: 8a856c42d75bb51eaadb3d164506b9c7fc090e30e6ea3f79d1d3648d1621d763
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 68b3ff56d157d0d7cf968a6b7b9a2f94
SHA-256: 27fed8215f484d629b0feb7b44a0b560bb27a281ab8e1cc11af57e3b9da13666
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: ed10a7390f719ba037d46078512ef30f
SHA-256: 9c57ef4a210c4cd8ba031f055753de2cb7f07d6635018536fac79d9d39d3add3
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 40db69a9a0f982f6199e3b1337bcb88f
SHA-256: f5042f592e1cb2a55e26fbb7880c5f73c3698606ce479f217eb076f87a3ecbc4
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: f38da2745963fef323239b9b8bf0d1cf
SHA-256: 63d120022f71dc9f1b052a399497eae652c8dcce65350042e245171e2ca5d1d7
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 2819fc4368fa0bb2fa2129a50cb1be49
SHA-256: 6344ac0a1d641467e0baf3838efc05e663034f46777f48fa1588ad682644583d
 
Red Hat Enterprise Linux Workstation Supplementary (v. 7)

x86_64:
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: fa64ecfd910c1a90c86b5c41bbf5b021
SHA-256: 05de1d32323a266aa52289cf482e16b7a5129fcd61409f6df1505a8286fb9af4
java-1.8.0-ibm-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 1a8a64b7fd720c339e4f7699c2bf0604
SHA-256: e01ebadaeef56bf29644a7192e5b389042d9f35da994c7dcdcb545f756344541
java-1.8.0-ibm-demo-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 423606d10ab0fd05b96aa37d7c0277d3
SHA-256: 70783530fa08bec38592ff1f64ab6edec5bba3fc8881193226de248aff7ca7ef
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.i686.rpm
File outdated by:  RHSA-2017:1220
    MD5: 5a662675d3a2862ca6188b8e419dbb60
SHA-256: 6febbcb0daf9726722286b5d17d192e68a07262c6c2446a9a9750e4393294a16
java-1.8.0-ibm-devel-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: f7635aa1c15519876d8a7ab3111689ec
SHA-256: ea15cb0fc3661eacbb1dc94a85216e2f65f997a127c55cf703417afc8cc82d83
java-1.8.0-ibm-jdbc-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 45344b341b2cefd7f367c752a63c46f9
SHA-256: 71a83db8f1b4b42be5f33998008bbdec61906c07f2521b68fd951f8efbb8210c
java-1.8.0-ibm-plugin-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 3a80ccd9e691b682910af13cc4c41104
SHA-256: 85e47c274b47b1bd536c0442094de16b2bce50ece515c2ebc3e3a08f0b46c6fd
java-1.8.0-ibm-src-1.8.0.4.0-1jpp.1.el7.x86_64.rpm
File outdated by:  RHSA-2017:1220
    MD5: 4cfdf28ce0e3a6b09129a1a8a7d17def
SHA-256: 84ebe7b9a2860b7e1095ee93420ba1424a3cf91f6574faa87673e6361b0ba4f2
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

1413554 - CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)
1413562 - CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)
1413583 - CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
1413653 - CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)
1413717 - CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)
1413764 - CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)
1413882 - CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)
1413906 - CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)
1413911 - CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)
1413920 - CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)
1413923 - CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)
1413955 - CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)
1414163 - CVE-2017-3259 Oracle JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/