Skip to content
OpenAdvisories
High ELSA-2014-1620 10 CVEs

Important: java-1.7.0-openjdk security and bug fix update (Oracle Linux 7)

Published Oct 15, 2014 · Updated Oct 15, 2014

Ecosystem: Oracle Linux

Summary

[1:1.7.0.65-2.5.3.1.0.1.el7_0]
- Update DISTRO_NAME in specfile

[1:1.7.0.65-2.5.3.1]
- Bump to 2.5.3 for latest security fixes.
- Remove obsolete patches.
- Add hsbootstrap option to pre-build HotSpot when required.
- Resolves: rhbz#1148893

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 java-1.7.0-openjdk 1:1.7.0.71-2.5.3.1.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-accessibility 1:1.7.0.71-2.5.3.1.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-demo 1:1.7.0.71-2.5.3.1.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-devel 1:1.7.0.71-2.5.3.1.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-headless 1:1.7.0.71-2.5.3.1.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-javadoc 1:1.7.0.71-2.5.3.1.0.1.el7_0
Oracle Linux · 7 java-1.7.0-openjdk-src 1:1.7.0.71-2.5.3.1.0.1.el7_0

Vulnerabilities 10

  • Unscored —
    CVE-2014-6457

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, a…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6502

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6504

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6506

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6511

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6512

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6517

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6519

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6531

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6558

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu