Skip to content
OpenAdvisories
Critical ELSA-2014-0675 24 CVEs

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

Published Jul 20, 2014 · Updated Jul 20, 2014

Ecosystem: Oracle Linux

Summary

[1.7.0.55-2.4.7.2.0.1.el7_0]
- Update DISTRO_NAME in specfile

[1.7.0.55-2.4.7.2]
- Remove NSS patches. Issues with PKCS11 provider mean it shouldn't be enabled.
- Always setup nss.cfg and depend on nss-devel at build-time to do so.
- This allows users who wish to use PKCS11+NSS to just add it to java.security.
- Patches to PKCS11 provider will be included upstream in 2.4.8 (ETA July 2014)
- Resolves: rhbz#1099565

[1.7.0.55-2.4.7.0.el7]
- bumped to future icedtea-forest 2.4.7
- updatever set to 55, buildver se to 13, release reset to 0
- removed upstreamed patch402 gstackbounds.patch
- removed Requires: rhino, BuildRequires is enough
- ppc64 repalced by power64 macro
- patch111 applied as dry-run (6.6 forward port)
- nss enabled, but notused as default (6.6 forward port)
- Resolves: rhbz#1099565

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 java-1.7.0-openjdk 1:1.7.0.55-2.4.7.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-accessibility 1:1.7.0.55-2.4.7.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-demo 1:1.7.0.55-2.4.7.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-devel 1:1.7.0.55-2.4.7.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-headless 1:1.7.0.55-2.4.7.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-javadoc 1:1.7.0.55-2.4.7.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-src 1:1.7.0.55-2.4.7.2.0.1.el7_0

Vulnerabilities 24

  • Unscored —
    CVE-2014-0429

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0446

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0451

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0452

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0453

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0454

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0455

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0456

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0457

    Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embe…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0458

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0459

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect av…

    openjdk-7 lcms2 lcms2 Debian Ubuntu
  • Unscored —
    CVE-2014-0460

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0461

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-1876

    The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2397

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2398

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 a…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2402

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2403

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2412

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote atta…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2413

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect in…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2414

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2421

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows …

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2423

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2427

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu