Skip to content
OpenAdvisories
Critical ELSA-2014-0889 13 CVEs

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

Published Jul 16, 2014 · Updated Jul 16, 2014

Ecosystem: Oracle Linux

Summary

[1.7.0.65-2.5.1.2.0.1.el6_5]
- Update DISTRO_NAME in specfile

[1.7.0.65-2.5.1.2]
- added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
- Resolves: rhbz#1115874

[1.7.0.65-2.5.1.1.el6]
- updated to security patched icedtea7-forest 2.5.1
- Resolves: rhbz#1115874

[1.7.0.60-2.5.0.1.el6]
- update to icedtea7-forest 2.5.0
- Resolves: rhbz#1115874

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 java-1.7.0-openjdk 1:1.7.0.65-2.5.1.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-accessibility 1:1.7.0.65-2.5.1.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-demo 1:1.7.0.65-2.5.1.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-devel 1:1.7.0.65-2.5.1.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-headless 1:1.7.0.65-2.5.1.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-javadoc 1:1.7.0.65-2.5.1.2.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-src 1:1.7.0.65-2.5.1.2.0.1.el7_0

Vulnerabilities 13

  • Unscored —
    CVE-2014-2483

    Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers…

  • Unscored —
    CVE-2014-2490

    Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect …

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4209

    Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiali…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4216

    Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiali…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4218

    Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4219

    Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, inte…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4221

    Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect confidentiality via unknown …

  • Unscored —
    CVE-2014-4223

    Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and avai…

  • Unscored —
    CVE-2014-4244

    Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allow…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4252

    Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiali…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4262

    Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiali…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4263

    Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-4266

    Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vector…

    openjdk-7 openjdk-6 Ubuntu