Upgrade RHEL:7 java-1.8.0-openjdk-demo-debug to version 1:1.8.0.71-2.b15.el7_2 or higher. This issue was patched in RHSA-2016:0049 .

php71-mbstring vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the php71-mbstring package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
C Out-of-bounds Write	<0:7.1.33-1.43.amzn1
L Use After Free	<0:7.1.31-1.41.amzn1
L Out-of-bounds Read	<0:7.1.31-1.41.amzn1
L Out-of-bounds Read	<0:7.1.31-1.41.amzn1
M Out-of-bounds Read	<0:7.1.27-1.37.amzn1
M Access Restriction Bypass	<0:7.1.27-1.37.amzn1
M Out-of-bounds Read	<0:7.1.30-1.40.amzn1
M Out-of-bounds Read	<0:7.1.30-1.40.amzn1
M Use of Uninitialized Resource	<0:7.1.30-1.40.amzn1
L Out-of-bounds Read	<0:7.1.29-1.39.amzn1
L Out-of-bounds Read	<0:7.1.29-1.39.amzn1
L Out-of-bounds Read	<0:7.1.29-1.39.amzn1
M NULL Pointer Dereference	<0:7.1.25-1.35.amzn1
M Arbitrary Argument Injection	<0:7.1.25-1.35.amzn1
M Cross-site Scripting (XSS)	<0:7.1.23-1.34.amzn1
L Out-of-bounds Read	<0:7.1.20-1.33.amzn1
L Out-of-bounds Read	<0:7.1.20-1.33.amzn1
M NULL Pointer Dereference	<0:7.1.17-1.32.amzn1
M Out-of-bounds Read	<0:7.1.17-1.32.amzn1
M Cross-site Scripting (XSS)	<0:7.1.17-1.32.amzn1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:7.1.17-1.32.amzn1
H Out-of-Bounds	<0:7.1.15-1.31.amzn1
M Cross-site Scripting (XSS)	<0:7.1.13-1.30.amzn1
M Incorrect Conversion between Numeric Types	<0:7.1.13-1.30.amzn1
H Out-of-Bounds	<0:7.1.11-1.28.amzn1