Red Hat Security Advisory

RHSA-2015:1926

java-1.8.0-oracle security update

Released 2015-10-22 · Red Hat rating Critical · View on Red Hat →

Fixed in

Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el7_1 +3
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el7_1 +1
Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el6_7 +3
Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el6_7 +3
Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el7_1 +3
Oracle Java for Red Hat Enterprise Linux Server 6 java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el6_7 +3
Oracle Java for Red Hat Enterprise Linux Workstation java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el6_7 +3
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el7_1 +3

Fixes 24 records

TI-2015-04118 CVE-2015-4902 · GHSA-69xw-2hhx-gvfg

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers…

HIGH 81KEV

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.13603 Published 2015-10-21 Fixed CWE-284

TI-2015-04063 CVE-2015-4843 · GHSA-5hrw-33cx-6w79

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 60

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08934 Published 2015-10-21 Fixed

TI-2015-04064 CVE-2015-4844 · GHSA-2rrf-qm4c-8229

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 59

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07514 Published 2015-10-21 Partial fix

TI-2015-04055 CVE-2015-4835 · GHSA-hw42-jfwx-84h9

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 58

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06416 Published 2015-10-21 Partial fix

TI-2015-04101 CVE-2015-4883 · GHSA-vw5f-vf9g-7xvr

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 57

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05611 Published 2015-10-21 Fixed

TI-2015-04099 CVE-2015-4881 · GHSA-m97c-9fgv-888f

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 57

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05611 Published 2015-10-21 Fixed

TI-2015-04078 CVE-2015-4860 · GHSA-x59v-wff7-pprc

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 57

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05611 Published 2015-10-21 Fixed

TI-2015-04027 CVE-2015-4805 · GHSA-cq64-ppmj-mrvv

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 57

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05611 Published 2015-10-21 Fixed

TI-2015-04117 CVE-2015-4901 · GHSA-cg4j-65f2-996x

Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect…

MEDIUM 47

Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0422 Published 2015-10-21 Fixed

TI-2015-04028 CVE-2015-4806 · GHSA-wp67-hpr4-56mq

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 42

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03412 Published 2015-10-21 Fixed

TI-2015-04086 CVE-2015-4868 · GHSA-v7jm-88cg-6qwx

Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04802 Published 2015-10-21 Fixed

TI-2015-04110 CVE-2015-4893 · GHSA-g9px-7f52-qj47

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51…

LOW 36

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04637 Published 2015-10-21 Partial fix

TI-2015-04062 CVE-2015-4842 · GHSA-phv4-p2cw-7frr

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

LOW 36

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04082 Published 2015-10-21 Partial fix

TI-2015-04025 CVE-2015-4803 · GHSA-8p8r-6fqw-9vx7

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51…

LOW 36

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04637 Published 2015-10-21 Partial fix

TI-2015-03956 CVE-2015-4734 · GHSA-w858-6895-v667

Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded…

LOW 36

Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04116 Published 2015-10-21 Partial fix

TI-2015-04127 CVE-2015-4911 · GHSA-cpw3-m2c6-7wch

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51…

LOW 35

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03907 Published 2015-10-21 Partial fix

TI-2015-04119 CVE-2015-4903 · GHSA-wx9q-j373-mc8m

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03438 Published 2015-10-21 Fixed

TI-2015-04100 CVE-2015-4882 · GHSA-rpc4-6m39-x2wh

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03875 Published 2015-10-21 Partial fix

TI-2015-04090 CVE-2015-4872 · GHSA-hvr5-v3pf-2jmv

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03218 Published 2015-10-21 Fixed

TI-2015-04060 CVE-2015-4840 · GHSA-24cm-p92g-3mhv

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03438 Published 2015-10-21 Partial fix

TI-2015-04032 CVE-2015-4810 · GHSA-f4x8-385p-3m28

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect…

LOW 31

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00412 Published 2015-10-21 Fixed

TI-2015-04132 CVE-2015-4916 · GHSA-3gwf-mm38-qg2j

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote…

LOW 29

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03665 Published 2015-10-21 Fixed

TI-2015-04124 CVE-2015-4908 · GHSA-gx8x-vx3v-4fcg

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote…

LOW 28

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0299 Published 2015-10-21 Fixed

TI-2015-04122 CVE-2015-4906 · GHSA-mgcx-h9p6-8q7r

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote…

LOW 28

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0299 Published 2015-10-21 Fixed