The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the allocated buffer. This functions were not directly callable by non-native user code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-jdbcUpgrade satellite-brandingUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-headlessUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-srcUpgrade satelliteUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demo | Aug 28, 2019 | Feb 11, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2019_advisory | Apr 23, 2019 | Feb 11, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.4.40Upgrade IBM Java to version 7.0.10.40Upgrade IBM Java to version 8.0.5.30 | Oct 20, 2026 | Oct 20, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Aug 27, 2019 | Aug 27, 2019 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-jdbc | Mar 7, 2019 | Feb 11, 2019 |
| Suse | — | Upgrade java-1_8_0-ibmUpgrade java-1_7_1-ibmUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibm-plugin | Dec 19, 2019 | Feb 11, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub