java-1.8.0-openjdk-1.8.0.111-1.b15.el7

エラータID: AXSA:2016-709:07

Release date: 
Wednesday, October 19, 2016 - 21:28
Subject: 
java-1.8.0-openjdk-1.8.0.111-1.b15.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The OpenJDK runtime environment.

Security issues fixed with this release:

CVE-2016-5542
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5554
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5573
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5582
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5597
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2016-5542
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.
CVE-2016-5554
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.
CVE-2016-5573
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.
CVE-2016-5582
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.
CVE-2016-5597
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking.
Additional Info: 

N/A

Download: 

SRPMS
  1. java-1.8.0-openjdk-1.8.0.111-1.b15.el7.src.rpm
    MD5: 9e8ae3d6ee7ad2ada21f7af1ace726cf
    SHA-256: 93b3fa03916b756cdf4ffe28e28365ce479ec70ee127bfb6d0f113531bede6ff
    Size: 52.74 MB

Asianux Server 7 for x86_64
  1. java-1.8.0-openjdk-1.8.0.111-1.b15.el7.x86_64.rpm
    MD5: 3afd1cd1ab1d11f8aa780265717d82a5
    SHA-256: 6a40e8d04281ec1205bbaf01c81e5bffa1e8d49ec18cf97077265a89e40cea5f
    Size: 222.28 kB
  2. java-1.8.0-openjdk-debug-1.8.0.111-1.b15.el7.x86_64.rpm
    MD5: 84e843099f39e9e1c68d8edc45d74276
    SHA-256: a260efcb89d7f6fa6a3b0b833ff0165d9b3d7c9e2272b80dbb807a9579b4e231
    Size: 226.76 kB
  3. java-1.8.0-openjdk-devel-1.8.0.111-1.b15.el7.x86_64.rpm
    MD5: a3b012d24fd0168e4ad841e294a9f9ba
    SHA-256: c8b27f97c8da138f1dc52d4ae5d33dd6c168fb29b5d8161d0201080cb25a9c6d
    Size: 9.66 MB
  4. java-1.8.0-openjdk-headless-1.8.0.111-1.b15.el7.x86_64.rpm
    MD5: 01785ad65b07cb2bd52a1eb04c5fcba2
    SHA-256: e4059ef4a3e5a48bc30d1fd7db9e7aeb9dbb700995608c5b426fb2d9f61062f1
    Size: 31.29 MB
  5. java-1.8.0-openjdk-headless-debug-1.8.0.111-1.b15.el7.x86_64.rpm
    MD5: 59cbfa91a371a49db94d8f5a4cacde55
    SHA-256: beb16768bc7c1324bd5bf3eca1188adf318962fe9bc232a124a1b4d78099aee5
    Size: 32.25 MB