Skip to content
OpenAdvisories
Critical ELSA-2015-0806 7 CVEs

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

Published Apr 15, 2015 · Updated Apr 15, 2015

Ecosystem: Oracle Linux

Summary

[1:1.7.0.75-2.5.5.1.0.1.el7_1]
- Update DISTRO_NAME in specfile

[1:1.7.0.75-2.5.5.1]
- repacked sources
- Resolves: rhbz#1209072

[1:1.7.0.75-2.5.5.0]
- Bump to 2.5.5 using OpenJDK 7u79 b14.
- Update OpenJDK tarball creation comments
- Remove test case for RH1191652 now fix has been verified.
- Drop AArch64 version of RH1191652 HotSpot patch as included upstream.
- Resolves: rhbz#1209072

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 java-1.7.0-openjdk 1:1.7.0.79-2.5.5.1.0.1.el7_1
Oracle Linux · 7 java-1.7.0-openjdk-accessibility 1:1.7.0.79-2.5.5.1.0.1.el7_1
Oracle Linux · 7 java-1.7.0-openjdk-demo 1:1.7.0.79-2.5.5.1.0.1.el7_1
Oracle Linux · 7 java-1.7.0-openjdk-devel 1:1.7.0.79-2.5.5.1.0.1.el7_1
Oracle Linux · 7 java-1.7.0-openjdk-headless 1:1.7.0.79-2.5.5.1.0.1.el7_1
Oracle Linux · 7 java-1.7.0-openjdk-javadoc 1:1.7.0.79-2.5.5.1.0.1.el7_1
Oracle Linux · 7 java-1.7.0-openjdk-src 1:1.7.0.79-2.5.5.1.0.1.el7_1

Vulnerabilities 7

  • Unscored —
    CVE-2005-1080

    Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0460

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0469

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0477

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity vi…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0478

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0480

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0488

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu