Skip to content
OpenAdvisories
High ELSA-2015-0808 7 CVEs

Important: java-1.6.0-openjdk security update (Oracle Linux 7)

Published Apr 15, 2015 · Updated Apr 15, 2015

Ecosystem: Oracle Linux

Summary

[1:1.6.0.35-1.13.7.1]
- Repackaged source files
- Resolves: rhbz#1209067

[1:1.6.0.35-1.13.7.0]
- Update to IcedTea 1.13.7
- Regenerate add-final-location-rpaths patch so as to be less disruptive.
- Resolves: rhbz#1209067

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 java-1.6.0-openjdk 1:1.6.0.35-1.13.7.1.0.1.el5_11
Oracle Linux · 7 java-1.6.0-openjdk-demo 1:1.6.0.35-1.13.7.1.0.1.el5_11
Oracle Linux · 7 java-1.6.0-openjdk-devel 1:1.6.0.35-1.13.7.1.0.1.el5_11
Oracle Linux · 7 java-1.6.0-openjdk-javadoc 1:1.6.0.35-1.13.7.1.0.1.el5_11
Oracle Linux · 7 java-1.6.0-openjdk-src 1:1.6.0.35-1.13.7.1.0.1.el5_11

Vulnerabilities 7

  • Unscored —
    CVE-2005-1080

    Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0460

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0469

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0477

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity vi…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0478

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0480

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0488

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu