Red Hat Security Advisory

RHSA-2014:1658

java-1.6.0-sun security update

Released 2014-10-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.2.el7, java-1.6.0-sun-devel-1:1.6.0.85-1jpp.2.el7 +3
Oracle Java for Red Hat Enterprise Linux Client 5 java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11, java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.3.el5_11 +9
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.2.el7, java-1.6.0-sun-devel-1:1.6.0.85-1jpp.2.el7 +3
Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.2.el6, java-1.6.0-sun-devel-1:1.6.0.85-1jpp.2.el6 +3
Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.2.el6, java-1.6.0-sun-devel-1:1.6.0.85-1jpp.2.el6 +1
Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.2.el7, java-1.6.0-sun-devel-1:1.6.0.85-1jpp.2.el7 +3
Oracle Java for Red Hat Enterprise Linux Server 5 java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11, java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.3.el5_11 +9
Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.2.el6, java-1.6.0-sun-devel-1:1.6.0.85-1jpp.2.el6 +3
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.2.el7, java-1.6.0-sun-devel-1:1.6.0.85-1jpp.2.el7 +3
Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6, java-1.6.0-sun-demo-1:1.6.0.85-1jpp.2.el6, java-1.6.0-sun-devel-1:1.6.0.85-1jpp.2.el6 +3

Fixes 16 records

TI-2014-05382 CVE-2014-6532 · GHSA-9x5w-fgxg-c345

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CV…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04808 Published 2014-10-15 Fixed

TI-2014-05353 CVE-2014-6503 · GHSA-wqrv-8v5g-pgqj

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

MEDIUM 48

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04808 Published 2014-10-15 Fixed

TI-2014-05343 CVE-2014-6493 · GHSA-x9c3-pfjg-6f43

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

MEDIUM 41

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04884 Published 2014-10-15 Fixed

TI-2014-03510 CVE-2014-4288 · GHSA-jvx7-35cg-w97r

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

MEDIUM 41

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04884 Published 2014-10-15 Fixed

TI-2014-05342 CVE-2014-6492 · GHSA-7h35-9873-jvrx

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03886 Published 2014-10-15 Fixed

TI-2014-05356 CVE-2014-6506 · GHSA-4mgp-qq86-9gj5

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 36

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03317 Published 2014-10-15 Fixed

TI-2014-05308 CVE-2014-6458 · GHSA-vv95-2f9w-r389

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to…

LOW 31

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00417 Published 2014-10-15 Fixed

TI-2014-05367 CVE-2014-6517 · GHSA-p339-pvxm-qhgv

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60…

LOW 30

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04102 Published 2014-10-15 Fixed

TI-2014-05361 CVE-2014-6511 · GHSA-vv94-8r3c-gfw5

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04053 Published 2014-10-15 Partial fix

TI-2014-05365 CVE-2014-6515 · GHSA-j2pm-q44p-cjf6

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers…

LOW 29

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03429 Published 2014-10-15 Fixed

TI-2014-05354 CVE-2014-6504 · GHSA-2c5p-3g7v-4hc2

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Hotspot.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03258 Published 2014-10-15 Fixed

TI-2014-05381 CVE-2014-6531 · GHSA-795p-mp4f-mp92

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 26

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03041 Published 2014-10-15 Fixed

TI-2014-05362 CVE-2014-6512 · GHSA-hrpq-wp36-q3q3

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 26

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03041 Published 2014-10-15 Fixed

TI-2014-05307 CVE-2014-6457 · GHSA-5m53-6w9m-xpwf

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSS…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03517 Published 2014-10-15 Fixed

TI-2014-05408 CVE-2014-6558 · GHSA-x23w-8crm-5546

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE…

LOW 19

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03137 Published 2014-10-15 Fixed

TI-2014-05352 CVE-2014-6502 · GHSA-ghvq-8j98-8h72

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE…

LOW 19

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03089 Published 2014-10-15 Fixed