Oracle Java SE 8u171 and 10.0.1 fixes an unspecified vulnerability in the Install component (CVE-2018-2811). Upstream has CVSS scored this issue as: 7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H External Reference: http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA
This issue has been addressed in the following products: Oracle Java for Red Hat Enterprise Linux 6 Via RHSA-2018:1202 https://access.redhat.com/errata/RHSA-2018:1202
This issue has been addressed in the following products: Oracle Java for Red Hat Enterprise Linux 7 Via RHSA-2018:1204 https://access.redhat.com/errata/RHSA-2018:1204