Red Hat Security AdvisoryRHSA-2012:1223
java-1.7.0-openjdk security update
Released 2012-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3 +2
- Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3 +2
- Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3, java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3 +2
Fixes 4 records
Priority CRITICAL 100KEV
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restri…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98536 · Published 2012-08-28 · Partial fix CWE-284
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05402 · Published 2012-08-30 · Partial fix
Priority MEDIUM 50
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0395 · Published 2012-08-30 · Partial fix
Priority LOW 17
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-de…
CVSS 2.0LOW 0.0· Network · No auth · Interaction — · EPSS 0.12471 · Published 2012-08-30 · Partial fix
THREATIST.IORead the docs