{"id":"CVE-2018-2657","aliases":["EUVD-2018-14512","GHSA-qq7j-frwj-qh26","RHSA-2018:0100","RHSA-2018:0115","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:1463","RHSA-2018:1812","SUSE-SU-2018:0630-1","SUSE-SU-2018:0645-1","SUSE-SU-2018:0694-1","SUSE-SU-2018:0743-1"],"status":"published","title":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)....","description":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07525,"percentile":0.94539,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-01-18T02:00:00Z","modified":"2026-07-01T10:03:50Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-26.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-26.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-26.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.20-65.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.20-65.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.20-65.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15}],"products":[{"vendor":"hp","product":"xp7_command_view"},{"vendor":"hp","product":"xp_command_view"},{"vendor":"hp","product":"xp_p9000_command_view"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle","product":"jrockit"},{"vendor":"oracle corporation","product":"java"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite"},{"vendor":"schneider-electric","product":"struxureware_data_center_expert"}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://security.netapp.com/advisory/ntap-20180117-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0521","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0115","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1812","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03911en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1463","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0458","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1040203","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0100","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/102629","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2657","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qq7j-frwj-qh26"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_171","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535354","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0100.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2579","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2588","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2602","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2618","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2629","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2633","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2641","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2657","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2663","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2678","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2678","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2678","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1569204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2783","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html#R160_181","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0115.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534768","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0458.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568966","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1417","tags":["advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/138823","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2582","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2582","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0521.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535352","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1463.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2627","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2639","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1812.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180630-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1057460","tags":["report"]},{"url":"https://bugzilla.suse.com/1076390","tags":["report"]},{"url":"https://bugzilla.suse.com/1082810","tags":["report"]},{"url":"https://bugzilla.suse.com/929900","tags":["report"]},{"url":"https://bugzilla.suse.com/966304","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2678","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180645-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180694-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1085018","tags":["report"]},{"url":"https://bugzilla.suse.com/955131","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180743-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-2657","description":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2018-01-18T02:00:00Z","modified":"2024-10-03T20:36:25.506Z","updated_at":"2026-11-02T14:35:04.911021Z"}],"euvd":[{"id":"EUVD-2018-14512","description":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2018-01-18T02:00:00Z","modified":"2024-10-03T20:36:25Z","updated_at":"2026-11-03T00:27:52.849961Z"}],"ghsa":[{"id":"GHSA-qq7j-frwj-qh26","title":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)....","description":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2022-05-13T01:16:55Z","modified":"2023-02-01T05:04:59Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T14:50:12.520785Z"}],"nvd":[{"id":"CVE-2018-2657","description":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2018-01-18T02:29:21.743Z","modified":"2026-06-17T01:56:03.033Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:22.309028Z"}],"osv":[{"id":"RHSA-2018:0100","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-16T00:56:47Z","modified":"2026-06-28T10:23:04Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0115","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-16T00:56:54Z","modified":"2026-06-28T10:23:05Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0458","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-16T00:57:22Z","modified":"2026-07-01T10:03:27Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0521","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-16T00:57:16Z","modified":"2026-07-01T10:03:33Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1463","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-16T00:56:59Z","modified":"2026-07-01T10:03:50Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1812","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-16T00:56:45Z","modified":"2026-06-28T10:25:08Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"SUSE-SU-2018:0630-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm provides the following fix:\n\nThe version was updated to 7.1.4.20 [bsc#1082810]\n\n* Security fixes:\n\n  - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582\n    CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603\n    CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677\n    CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n  - IJ04281 Class Libraries: Startup time increase after applying\n             apar IV96905\n  - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n  - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n           trace, log was not enabled by default\n  - IJ03607 JIT Compiler: Result String contains a redundant dot when\n            converted from BigDecimal with 0 on all platforms\n  - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n  - IJ04282 Security: Change in location and default of jurisdiction\n            policy files\n  - IJ03853 Security: IBMCAC provider does not support SHA224\n  - IJ02679 Security: IBMPKCS11Impl – Bad sessions are being allocated\n            internally\n  - IJ02706 Security: IBMPKCS11Impl – Bad sessions are being allocated\n            internally\n  - IJ03552 Security: IBMPKCS11Impl - Config file problem with the slot\n            specification attribute\n  - IJ01901 Security: IBMPKCS11Impl – SecureRandom.setSeed() exception\n  - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n            stash, JKS Chain issue and JVM argument parse issue with iKeyman\n  - IJ03256 Security: javax.security.auth.Subject.toString() throws NPE\n  - IJ02284 JIT Compiler: Division by zero in JIT compiler\n  - Make it possible to run Java jnlp files from Firefox. (bsc#1057460)\n","status":"published","published":"2018-03-07T09:32:48Z","modified":"2026-02-04T03:47:29.082541Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0645-1","title":"Security update for java-1_7_0-ibm","description":"\n  \nThis update for java-1_7_0-ibm provides the following fixes:\n\nThe version was updated to 7.0.10.20 [bsc#1082810]:\n\n* Following security issues were fixed:\n\n  - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582\n    CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603\n    CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677\n    CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n    - IJ04281 Class Libraries: Startup time increase after applying\n      \t      apar IV96905\n    - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n    - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n      \t      trace, log was not enabled by default\n    - IJ03607 JIT Compiler: Result String contains a redundant dot when\n      \t      converted from BigDecimal with 0 on all platforms\n    - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n    - IJ04282 Security: Change in location and default of jurisdiction\n      \t      policy files\n    - IJ03853 Security: IBMCAC provider does not support SHA224\n    - IJ02679 Security: IBMPKCS11Impl – Bad sessions are being allocated\n      \t      internally\n    - IJ02706 Security: IBMPKCS11Impl – Bad sessions are being allocated\n      \t      internally\n    - IJ03552 Security: IBMPKCS11Impl - Config file problem with the slot\n      \t      specification attribute\n    - IJ01901 Security: IBMPKCS11Impl – SecureRandom.setSeed() exception\n    - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n      \t      stash, JKS Chain issue and JVM argument parse issue with iKeyman\n    - IJ02284 JIT Compiler: Division by zero in JIT compiler\n\n    - Make it possible to run Java jnlp files from Firefox. (bsc#1057460)\n\n","status":"published","published":"2018-03-09T07:25:29Z","modified":"2025-05-02T04:08:12.398005Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0694-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\nThe version was updated to 7.1.4.20 [bsc#1082810]\n\n* Security fixes:\n\n  - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582\n    CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603\n    CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677\n    CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n  - IJ04281 Class Libraries: Startup time increase after applying\n              apar IV96905\n  - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n  - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n              trace, log was not enabled by default\n  - IJ03607 JIT Compiler: Result String contains a redundant dot when\n              converted from BigDecimal with 0 on all platforms\n  - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n  - IJ04282 Security: Change in location and default of jurisdiction\n              policy files\n  - IJ03853 Security: IBMCAC provider does not support SHA224\n  - IJ02679 Security: IBMPKCS11Impl -- Bad sessions are being allocated\n              internally\n  - IJ02706 Security: IBMPKCS11Impl -- Bad sessions are being allocated\n              internally\n  - IJ03552 Security: IBMPKCS11Impl -- Config file problem with the slot\n              specification attribute\n  - IJ01901 Security: IBMPKCS11Impl -- SecureRandom.setSeed() exception\n  - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n              stash, JKS Chain issue and JVM argument parse issue with iKeyman\n  - IJ03256 Security: javax.security.auth.Subject.toString() throws NPE\n  - IJ02284 JIT Compiler: Division by zero in JIT compiler\n\n* SUSE fixes:\n\n  - Make it possible to run Java jnlp files from Firefox. (bsc#1057460)\n\n  - Fixed symlinks to policy files on update [bsc#1085018]\n\n  - Fixed jpackage-java-1_7_1-ibm-webstart.desktop file to allow\n    Java jnlp files run from Firefox. [bsc#1057460, bsc#1076390]\n\n  - Fix javaws segfaults when java expiration timer has elapsed. [bsc#929900]\n\n  - Provide IBM Java updates for IBMs PMR 55931,671,760 and for SUSEs\n    SR 110991601735. [bsc#966304]\n","status":"published","published":"2018-03-15T12:37:08Z","modified":"2026-02-04T04:15:46.712581Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0743-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issue:\n\nThe version was updated to 7.1.4.20 [bsc#1082810]\n\n* Security fixes:\n\n  - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582\n    CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603\n    CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677\n    CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n  - IJ04281 Class Libraries: Startup time increase after applying\n              apar IV96905\n  - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n  - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n              trace, log was not enabled by default\n  - IJ03607 JIT Compiler: Result String contains a redundant dot when\n              converted from BigDecimal with 0 on all platforms\n  - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n  - IJ04282 Security: Change in location and default of jurisdiction\n              policy files\n  - IJ03853 Security: IBMCAC provider does not support SHA224\n  - IJ02679 Security: IBMPKCS11Impl -- Bad sessions are being allocated\n              internally\n  - IJ02706 Security: IBMPKCS11Impl -- Bad sessions are being allocated\n              internally\n  - IJ03552 Security: IBMPKCS11Impl -- Config file problem with the slot\n              specification attribute\n  - IJ01901 Security: IBMPKCS11Impl -- SecureRandom.setSeed() exception\n  - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n              stash, JKS Chain issue and JVM argument parse issue with iKeyman\n  - IJ03256 Security: javax.security.auth.Subject.toString() throws NPE\n  - IJ02284 JIT Compiler: Division by zero in JIT compiler\n\n* SUSE fixes:\n\n  - Make it possible to run Java jnlp files from Firefox. (bsc#1057460)\n\n  - Fixed jpackage-java-1_7_1-ibm-webstart.desktop file to allow\n    Java jnlp files run from Firefox. [bsc#1057460, bsc#1076390]\n\n  - Fix javaws segfaults when java expiration timer has elapsed. [bsc#929900]\n\n  - Provide IBM Java updates for IBMs PMR 55931,671,760 and for SUSEs\n    SR 110991601735. [bsc#966304]\n\n  - Ensure that all Java policy files are symlinked into the proper file system\n    locations. Without those symlinks, several OES iManager plugins did not\n    function properly. [bsc#1085018]\n","status":"published","published":"2018-03-19T13:10:56Z","modified":"2026-02-04T04:15:42.340743Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}