Red Hat Security Advisory

RHSA-2014:0408

java-1.6.0-openjdk security and bug fix update

Released 2014-04-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10, java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-5.1.13.3.el5_10 +7
Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10, java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-5.1.13.3.el5_10 +7
Red Hat Enterprise Linux Desktop (v. 6) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5
Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-demo-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-devel-1:1.6.0.0-5.1.13.3.el6_5 +2
Red Hat Enterprise Linux HPC Node (v. 6) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5
Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-demo-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-devel-1:1.6.0.0-5.1.13.3.el6_5 +2
Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-devel-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-javadoc-1:1.6.0.0-5.1.13.3.el6_5
Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-demo-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-src-1:1.6.0.0-5.1.13.3.el6_5
Red Hat Enterprise Linux Workstation (v. 6) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-devel-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-javadoc-1:1.6.0.0-5.1.13.3.el6_5
Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-demo-1:1.6.0.0-5.1.13.3.el6_5, java-1.6.0-openjdk-src-1:1.6.0.0-5.1.13.3.el6_5

Fixes 19 records

TI-2014-00408 CVE-2014-0429 · GHSA-6966-vmh9-2rgg

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07418 Published 2014-04-15 Fixed

TI-2014-01931 CVE-2014-2421 · GHSA-xpc4-vv94-q5pm

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related t…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00436 CVE-2014-0457 · GHSA-ph3v-m9mc-6c3f

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00435 CVE-2014-0456 · GHSA-jc53-2whr-8m6w

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00440 CVE-2014-0461 · GHSA-jhjq-483p-7vc6

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 49

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05963 Published 2014-04-16 Fixed

TI-2014-01907 CVE-2014-2397 · GHSA-h6qh-cj3m-7qm5

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05486 Published 2014-04-16 Fixed

TI-2014-01937 CVE-2014-2427 · GHSA-2h4c-7xh4-m37v

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.