Linux · Security advisory · September 2, 2019

RHSA-2019:2590: Security update for 8 packages

RHSA-2019:2590, released September 2, 2019, fixes 7 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0939

95th percentile

Patch now 0
                                Urgent 0
                                High 2
                                Routine 5

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2019-11772	java-1.8.0-ibm: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This upda...	9.8	0.0210	None reported
High	CVE-2019-11775	java-1.8.0-ibm: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This upda...	7.4	0.0147	None reported
Routine	CVE-2019-7317	firefox: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-freebecause png_image_free_function is called u...	5.3	0.0939	None reported
Routine	CVE-2019-2762	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	5.3	0.0435	None reported
Routine	CVE-2019-2769	java-11-openjdk-devel: The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Develop...	5.3	0.0435	None reported
Routine	CVE-2019-2786	java-1.8.0-openjdk-javadoc: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.1	0.0261	None reported
Routine	CVE-2019-2816	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	4.8	0.0229	None reported