Red Hat Security AdvisoryRHSA-2013:0275
java-1.7.0-openjdk security update
Released 2013-02-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9, java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9.i386, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.7.1.el5_9 +7
- Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.9-2.3.7.1.el6_3 +2
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.9-2.3.7.1.el6_3 +2
- Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.9-2.3.7.1.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.7.1.el6_3 +1
- Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-devel-1:1.7.0.9-2.3.7.1.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-demo-1:1.7.0.9-2.3.7.1.el6_3, java-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.7.1.el6_3 +1
Fixes 4 records
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentialit…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06917 · Published 2013-02-20 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06196 · Published 2013-02-20 · Fixed
Priority LOW 39
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the proces…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.35584 · Published 2013-02-08 · Partial fix CWE-310
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0395 · Published 2013-02-20 · Fixed
THREATIST.IORead the docs