Java SE and Java SE Embedded are vulnerable to unauthorized modification attacks. An unauthenticated attacker can exploit a flaw in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application which leads to data modification.
www.debian.org/security/2017/dsa-3858
www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
www.securityfocus.com/bid/97740
www.securitytracker.com/id/1038286
access.redhat.com/errata/RHSA-2017:1108
access.redhat.com/errata/RHSA-2017:1109
access.redhat.com/errata/RHSA-2017:1117
access.redhat.com/errata/RHSA-2017:1118
access.redhat.com/errata/RHSA-2017:1119
access.redhat.com/errata/RHSA-2017:1204
access.redhat.com/errata/RHSA-2017:1220
access.redhat.com/errata/RHSA-2017:1221
access.redhat.com/errata/RHSA-2017:1222
access.redhat.com/errata/RHSA-2017:3453
access.redhat.com/security/updates/classification/#moderate
rhn.redhat.com/errata/RHSA-2016-2079.html
security.gentoo.org/glsa/201705-03
security.gentoo.org/glsa/201707-01