The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demo | Aug 28, 2019 | Feb 22, 2018 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2018_advisory | May 2, 2018 | Feb 22, 2018 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.5.10Upgrade IBM Java to version 7.1.4.20 | Oct 20, 2026 | Oct 20, 2026 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-develUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibmUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-demo | Apr 21, 2018 | Feb 22, 2018 |
| Suse | — | Upgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_0-ibmUpgrade java-1_7_0-ibm-pluginUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibmUpgrade java-1_7_1-ibm-develUpgrade java-1_7_0-ibm-alsaUpgrade java-1_8_0-ibmUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_7_0-ibm-develUpgrade java-1_8_0-ibm-plugin | May 29, 2018 | Feb 22, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub