Skip to content
OpenAdvisories
High ELSA-2014-1634 10 CVEs

Important: java-1.6.0-openjdk security and bug fix update (Oracle Linux 7)

Published Oct 14, 2014 · Updated Oct 14, 2014

Ecosystem: Oracle Linux

Summary

[1:1.6.0.33-1.13.5.0]
- Update to IcedTea 1.13.5
- Remove upstreamed patches.
- Regenerate add-final-location-rpaths patch against new release.
- Change versioning to match java-1.7.0-openjdk so revisions work.
- Use xz for tarballs to reduce file size.
- No need to explicitly disable system LCMS any more (bug fixed upstream).
- Add icedteasnapshot to setup lines so they work with pre-release tarballs.
- Resolves: rhbz#1148901

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 java-1.6.0-openjdk 1:1.6.0.33-1.13.5.0.0.1.el5_11
Oracle Linux · 7 java-1.6.0-openjdk-demo 1:1.6.0.33-1.13.5.0.0.1.el5_11
Oracle Linux · 7 java-1.6.0-openjdk-devel 1:1.6.0.33-1.13.5.0.0.1.el5_11
Oracle Linux · 7 java-1.6.0-openjdk-javadoc 1:1.6.0.33-1.13.5.0.0.1.el5_11
Oracle Linux · 7 java-1.6.0-openjdk-src 1:1.6.0.33-1.13.5.0.0.1.el5_11

Vulnerabilities 10

  • Unscored —
    CVE-2014-6457

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, a…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6502

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6504

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6506

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6511

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6512

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6517

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6519

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6531

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6558

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu