Red Hat Security AdvisoryRHSA-2013:0165
java-1.7.0-openjdk security update
Released 2013-01-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1, java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1.i386, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.el5_9.1 +7
- Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3 +2
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3 +2
- Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3 +1
- Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3, java-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3 +1
Fixes 2 records
Priority CRITICAL 100KEV
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a priva…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.9708 · Published 2013-01-10 · Fixed CWE-284
Priority MEDIUM 50
Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04577 · Published 2013-01-14 · Fixed CWE-264
