IBM Java vulnerability

[Firewall_Head]

Hi Checkmates,

Can someone help me on these CVE's , is GAIA affected by them ?

Thanks in advance !

========

WR

FH

[G_W_Albrecht]

Not R81.10 / 20 - R82:

[Expert@GW82:0]# java -version
java version "1.8.0_401"
Java(TM) SE Runtime Environment (build 8.0.8.21 - pxi3280sr8fp21-20240221_01(SR8 FP21))
IBM J9 VM (build 2.9, JRE 1.8.0 Linux x86-32-Bit 20240216_65882 (JIT enabled, AOT enabled)
OpenJ9 - 6a2a245
OMR - 9440e34
IBM - 7394519)
JCL - 20231221_01 based on Oracle jdk8u401-b10

[Firewall_Head]

Hi @G_W_Albrecht ,

Should I look at this line of output to check the version?

Java(TM) SE Runtime Environment (build 8.0.8.21 - pxi3280sr8fp21-20240221_01(SR8 FP21))

=====

WR

FH

[G_W_Albrecht]

Yes.

[Chris_Atkinson]

Also in case you weren't aware of this resource:

https://support.checkpoint.com/security-advisories

[G_W_Albrecht]

Use the java -version command yourself on your deployed GWs / SMS and you shall see 😸

[G_W_Albrecht]

I found that JAVA is not present on GAiA Embedded Appliances 😉