Insecure encryption algorithm In java-1.7.0-openjdk
Description
It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel7 | 1:1.7.0.161-2.6.12.0.el7_4 | ||
rpm rhel6 | - | - | |
rpm rhel6 | 1:1.8.0.151-1.b12.el6_9 | ||
rpm rhel6 | 1:1.7.0.161-2.6.12.0.el6_9 | ||
rpm rhel7 | 1:1.8.0.151-1.b12.el7_4 |
Aliases
1. 2. 3.