Skip to content
OpenAdvisories
High ELSA-2015-0809 8 CVEs

Important: java-1.8.0-openjdk security update (Oracle Linux 7)

Published Apr 15, 2015 · Updated Apr 15, 2015

Ecosystem: Oracle Linux

Summary

[1:1.8.0.45-30.b13]
- repacked sources
- Resolves: RHBZ#1209076

[1:1.8.0.45-7.b13]
- Re-add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
- Remove ppc64le test case now fix has been verified.
- Resolves: rhbz#1194378

[1:1.8.0.45-27.b13]
- updated to security u45
- minor sync with 7.2
- generate_source_tarball.sh
- adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
- reworked (synced) zero patches (removed 103,11 added 204, 400-403)
- family of 5XX patches renamed to 6XX
- added upstreamed patch 501 and 505
- included removeSunEcProvider-RH1154143.patch
- returned java (jre only) provides
- repacked policies (source20)
- removed duplicated NVR provides
- added automated test for priority (length7)
- Resolves: RHBZ#1209076

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 java-1.8.0-openjdk 1:1.8.0.45-30.b13.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-accessibility 1:1.8.0.45-30.b13.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-demo 1:1.8.0.45-30.b13.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-devel 1:1.8.0.45-30.b13.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-headless 1:1.8.0.45-30.b13.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-javadoc 1:1.8.0.45-30.b13.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-src 1:1.8.0.45-30.b13.el7_1

Vulnerabilities 8

  • Unscored —
    CVE-2005-1080

    Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0460

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0469

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0470

    Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors relate…

  • Unscored —
    CVE-2015-0477

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity vi…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0478

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0480

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0488

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu