topic Re: IBM Java vulnerability in General Topics

IBM Java vulnerability

Firewall_Head — Thu, 06 Mar 2025 07:27:38 GMT

Hi Checkmates,

Can someone help me on these CVE's , is GAIA affected by them ?

Thanks in advance !

========

Re: IBM Java vulnerability

G_W_Albrecht — Thu, 06 Mar 2025 08:33:06 GMT

Not R81.10 / 20 - R82:

[Expert@GW82:0]# java -version
java version "1.8.0_401"
Java(TM) SE Runtime Environment (build 8.0.8.21 - pxi3280sr8fp21-20240221_01(SR8 FP21))
IBM J9 VM (build 2.9, JRE 1.8.0 Linux x86-32-Bit 20240216_65882 (JIT enabled, AOT enabled)
OpenJ9 - 6a2a245
OMR - 9440e34
IBM - 7394519)
JCL - 20231221_01 based on Oracle jdk8u401-b10

Re: IBM Java vulnerability

Chris_Atkinson — Thu, 06 Mar 2025 13:44:54 GMT

Also in case you weren't aware of this resource:

https://support.checkpoint.com/security-advisories

Re: IBM Java vulnerability

G_W_Albrecht — Thu, 06 Mar 2025 14:28:58 GMT

Use the java -version command yourself on your deployed GWs / SMS and you shall see 😸

Re: IBM Java vulnerability

G_W_Albrecht — Thu, 06 Mar 2025 14:49:25 GMT

I found that JAVA is not present on GAiA Embedded Appliances 😉

Re: IBM Java vulnerability

Firewall_Head — Thu, 06 Mar 2025 15:09:29 GMT

Hi @G_W_Albrecht ,

Should I look at this line of output to check the version?

Java(TM) SE Runtime Environment (build 8.0.8.21 - pxi3280sr8fp21-20240221_01(SR8 FP21))

=====

Re: IBM Java vulnerability

G_W_Albrecht — Thu, 06 Mar 2025 15:15:55 GMT

Yes.