Red Hat Security AdvisoryRHSA-2015:0806
java-1.7.0-openjdk security update
Released 2015-04-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-headless-1:1.7.0.79-2.5.5.1.el7_1
- Red Hat Enterprise Linux Client Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-demo-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-devel-1:1.7.0.79-2.5.5.1.el7_1 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-headless-1:1.7.0.79-2.5.5.1.el7_1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-demo-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-devel-1:1.7.0.79-2.5.5.1.el7_1 +2
- Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-devel-1:1.7.0.79-2.5.5.1.el6_6
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-javadoc-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-src-1:1.7.0.79-2.5.5.1.el6_6
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-devel-1:1.7.0.79-2.5.5.1.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-javadoc-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-src-1:1.7.0.79-2.5.5.1.el6_6
- Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-devel-1:1.7.0.79-2.5.5.1.el6_6
- Red Hat Enterprise Linux Server (v. 7) java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.ael7b_1, java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-devel-1:1.7.0.79-2.5.5.1.ael7b_1 +3
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-javadoc-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-src-1:1.7.0.79-2.5.5.1.el6_6
- Red Hat Enterprise Linux Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.79-2.5.5.1.ael7b_1, java-1.7.0-openjdk-accessibility-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-demo-1:1.7.0.79-2.5.5.1.ael7b_1 +5
- Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-devel-1:1.7.0.79-2.5.5.1.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-devel-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-headless-1:1.7.0.79-2.5.5.1.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-javadoc-1:1.7.0.79-2.5.5.1.el6_6, java-1.7.0-openjdk-src-1:1.7.0.79-2.5.5.1.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-demo-1:1.7.0.79-2.5.5.1.el7_1, java-1.7.0-openjdk-javadoc-1:1.7.0.79-2.5.5.1.el7_1 +1
Fixes 7 records
Priority MEDIUM 58
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06408 · Published 2015-04-16 · Partial fix
Priority MEDIUM 48
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04808 · Published 2015-04-16 · Fixed
Priority LOW 32
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools.
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.03091 · Published 2015-04-16 · Fixed
Priority LOW 32
Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a ..
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05846 · Published 2005-04-12 · Fixed
Priority LOW 29
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03629 · Published 2015-04-16 · Fixed
Priority LOW 25
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02833 · Published 2015-04-16 · Fixed
Priority LOW 25
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02833 · Published 2015-04-16 · Fixed
THREATIST.IORead the docs