Red Hat Security Advisory

RHSA-2014:1636

java-1.8.0-openjdk security update

Released 2014-10-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) java-1.8.0-openjdk-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-headless-1.8.0.25-1.b17.el6
Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.8.0-openjdk-demo-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-devel-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-javadoc-1.8.0.25-1.b17.el6 +1
Red Hat Enterprise Linux HPC Node (v. 6) java-1.8.0-openjdk-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-headless-1.8.0.25-1.b17.el6
Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.8.0-openjdk-demo-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-devel-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-javadoc-1.8.0.25-1.b17.el6 +1
Red Hat Enterprise Linux Server (v. 6) java-1.8.0-openjdk-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-devel-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-headless-1.8.0.25-1.b17.el6
Red Hat Enterprise Linux Server Optional (v. 6) java-1.8.0-openjdk-demo-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-javadoc-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-src-1.8.0.25-1.b17.el6
Red Hat Enterprise Linux Workstation (v. 6) java-1.8.0-openjdk-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-devel-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-headless-1.8.0.25-1.b17.el6
Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.8.0-openjdk-demo-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-javadoc-1.8.0.25-1.b17.el6, java-1.8.0-openjdk-src-1.8.0.25-1.b17.el6

Fixes 12 records

TI-2014-05412 CVE-2014-6562 · GHSA-9ccg-mf8w-cvfr

Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04783 Published 2014-10-15 Fixed

TI-2014-05356 CVE-2014-6506 · GHSA-4mgp-qq86-9gj5

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 36

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03317 Published 2014-10-15 Fixed

TI-2014-05318 CVE-2014-6468 · GHSA-fx6v-47q8-469f

Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect…

LOW 35

Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.02706 Published 2014-10-15 Fixed

TI-2014-05367 CVE-2014-6517 · GHSA-p339-pvxm-qhgv

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60…

LOW 30

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04102 Published 2014-10-15 Fixed

TI-2014-05361 CVE-2014-6511 · GHSA-vv94-8r3c-gfw5

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04053 Published 2014-10-15 Partial fix

TI-2014-05369 CVE-2014-6519 · GHSA-8g4j-g5qm-5hj6

Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Hotspot.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03429 Published 2014-10-15 Fixed

TI-2014-05354 CVE-2014-6504 · GHSA-2c5p-3g7v-4hc2

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Hotspot.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03258 Published 2014-10-15 Fixed

TI-2014-05381 CVE-2014-6531 · GHSA-795p-mp4f-mp92

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 26

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03041 Published 2014-10-15 Fixed

TI-2014-05362 CVE-2014-6512 · GHSA-hrpq-wp36-q3q3

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 26

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03041 Published 2014-10-15 Fixed

TI-2014-05307 CVE-2014-6457 · GHSA-5m53-6w9m-xpwf

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSS…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03517 Published 2014-10-15 Fixed

TI-2014-05408 CVE-2014-6558 · GHSA-x23w-8crm-5546

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 19

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03137 Published 2014-10-15 Fixed

TI-2014-05352 CVE-2014-6502 · GHSA-ghvq-8j98-8h72

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 19

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03089 Published 2014-10-15 Fixed