Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Scientific Linux 6: SLSA-2018:2241-1 Moderate: Java 1.8 Security Issue

Calendar Jul 23, 2018 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate java update insufficient validation sl6
OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952) SL6 x86_64 java-1.8.0-openjdk-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-debuginfo-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-headless-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8 [More...] 
Synopsis:          Moderate: java-1.8.0-openjdk security update
Advisory ID:       SLSA-2018:2241-1
Issue Date:        2018-07-23
CVE Numbers:       CVE-2018-2952
--

Security Fix(es):

* OpenJDK: insufficient index validation in PatternSyntaxException
getMessage() (Concurrency, 8199547) (CVE-2018-2952)
--

SL6
  x86_64
    java-1.8.0-openjdk-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-debuginfo-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-headless-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-demo-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-demo-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-devel-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-devel-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-headless-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-src-1.8.0.181-3.b13.el6_10.x86_64.rpm
    java-1.8.0-openjdk-src-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm
  i386
    java-1.8.0-openjdk-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-debuginfo-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-headless-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-debug-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-demo-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-demo-debug-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-devel-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-devel-debug-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-headless-debug-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-src-1.8.0.181-3.b13.el6_10.i686.rpm
    java-1.8.0-openjdk-src-debug-1.8.0.181-3.b13.el6_10.i686.rpm
  noarch
    java-1.8.0-openjdk-javadoc-1.8.0.181-3.b13.el6_10.noarch.rpm
    java-1.8.0-openjdk-javadoc-debug-1.8.0.181-3.b13.el6_10.noarch.rpm

- Scientific Linux Development Team