Red Hat Security Advisory

RHSA-2015:0857

java-1.7.0-oracle security update

Released 2015-04-20 · Red Hat rating Critical · View on Red Hat →

Fixed in

Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el7_1, java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el7_1 +3
Oracle Java for Red Hat Enterprise Linux Client 5 java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11, java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11.i586, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el5_11 +9
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el7_1, java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el7_1 +1
Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el6_6, java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el6_6 +3
Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el6_6, java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el6_6 +3
Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el7_1, java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el7_1 +3
Oracle Java for Red Hat Enterprise Linux Server 5 java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11, java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11.i586, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el5_11 +9
Oracle Java for Red Hat Enterprise Linux Server 6 java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el6_6, java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el6_6 +3
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el7_1, java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el7_1 +3
Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6, java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el6_6, java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el6_6 +3

Fixes 12 records

TI-2015-00431 CVE-2015-0469 · GHSA-23mh-jxf4-vm3h

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote…

MEDIUM 58

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06408 Published 2015-04-16 Partial fix

TI-2015-00452 CVE-2015-0491 · GHSA-2fc3-hgx7-wphv

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2015-04-16 Fixed

TI-2015-00421 CVE-2015-0459 · GHSA-g8gr-6v75-xhc5

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0572 Published 2015-04-16 Fixed

TI-2015-00422 CVE-2015-0460 · GHSA-hc84-v6qx-7xrf

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04808 Published 2015-04-16 Fixed

TI-2015-00453 CVE-2015-0492 · GHSA-m5m8-2949-56mc

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows…

MEDIUM 47

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-04…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04308 Published 2015-04-16 Fixed

TI-2015-00420 CVE-2015-0458 · GHSA-3987-vfrq-6p9c

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote…

MEDIUM 41

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04954 Published 2015-04-16 Fixed

TI-2015-00445 CVE-2015-0484 · GHSA-gv8j-f9gg-mrg2

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02971 Published 2015-04-16 Fixed

TI-2015-00442 CVE-2015-0480 · GHSA-vhvr-cgg2-5j24

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote…

LOW 32

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03091 Published 2015-04-16 Fixed

TI-2005-01018 CVE-2005-1080 · GHSA-g7vc-f4x5-69xx

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK…

LOW 32

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05846 Published 2005-04-12 Fixed

TI-2015-00449 CVE-2015-0488 · GHSA-942j-rfmc-q4mq

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03629 Published 2015-04-16 Fixed

TI-2015-00440 CVE-2015-0478 · GHSA-gp6q-r5x8-3f6p

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02833 Published 2015-04-16 Fixed

TI-2015-00439 CVE-2015-0477 · GHSA-gjp3-335p-r7fw

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote…

LOW 25

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02833 Published 2015-04-16 Fixed