Insecure encryption algorithm In java-1.8.0-openjdk
Description
It was discovered that the Security component of OpenJDK did not allow users to restrict the set of algorithms allowed for Jar integrity verification. This flaw could allow an attacker to modify content of the Jar file that used weak signing key or hash algorithm.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel6 | 1:1.8.0.131-0.b11.el6_9 | ||
rpm rhel6 | 1:1.7.0.141-2.6.10.1.el6_9 | ||
rpm rhel5 | - | - | |
rpm rhel7 | 1:1.8.0.131-2.b11.el7_3 | ||
rpm rhel5 | - | - | |
rpm rhel7 | 1:1.7.0.141-2.6.10.1.el7_3 | ||
rpm rhel5 | - | - |
Aliases
1. 2. 3.