Red Hat Security Advisory

RHSA-2012:1009

java-1.7.0-openjdk security and bug fix update

Released 2012-06-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3
Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3 +2
Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3 +2
Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3
Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3 +2
Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3
Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3 +2

Fixes 10 records

TI-2012-01511 CVE-2012-1723 · GHSA-ch9c-pq9h-jrr9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to af…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.93566 Published 2012-06-16 Fixed CWE-284

TI-2012-01501 CVE-2012-1713 · GHSA-j7wm-898c-h674

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allow…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05916 Published 2012-06-16 Partial fix

TI-2012-01513 CVE-2012-1725 · GHSA-57mh-hh97-hpf2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality,…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05555 Published 2012-06-16 Fixed

TI-2012-01504 CVE-2012-1716 · GHSA-vvhj-wvw3-qcrv

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05509 Published 2012-06-16 Fixed

TI-2012-01499 CVE-2012-1711 · GHSA-hjww-xjq7-7798

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 38

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0286 Published 2012-06-16 Fixed

TI-2012-01514 CVE-2012-1726 · GHSA-h3pp-36x3-26c8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 33

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02546 Published 2012-06-16 Fixed

TI-2012-01506 CVE-2012-1718 · GHSA-q3mc-2rf6-h4h2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04214 Published 2012-06-16 Partial fix

TI-2012-01512 CVE-2012-1724 · GHSA-j436-w8m4-m9w5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03876 Published 2012-06-16 Fixed

TI-2012-01507 CVE-2012-1719 · GHSA-wjv6-r6x3-5g3g

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0335 Published 2012-06-16 Partial fix

TI-2012-01505 CVE-2012-1717 · GHSA-crx8-mq4w-pqc9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 12

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00476 Published 2012-06-16 Partial fix