Skip to content
OpenAdvisories
Critical 1 exploited CVE ELSA-2015-1229 14 CVEs

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

Published Jul 15, 2015 · Updated Jul 15, 2015

Ecosystem: Oracle Linux

Summary

[1:1.7.0.85-2.6.1.2.0.1.el7_1]
- Update DISTRO_NAME in specfile

[1:1.7.0.85-2.6.1.2]
- Bump upstream tarball to u25b01 to fix issue with 8075374 backport.
- Resolves: rhbz#1235158

[1:1.7.0.85-2.6.1.1]
- Update OpenJDK tarball so correct version is used.
- Resolves: rhbz#1235158

[1:1.7.0.85-2.6.1.0]
- Add additional java.security md5sum from January CPU
- Resolves: rhbz#1235158

[1:1.7.0.85-2.6.1.0]
- Bump to 2.6.1 and u85b00.
- Resolves: rhbz#1235158

[1:1.7.0.80-2.6.0.1]
- Pass SYSTEM_GSETTINGS='true' to the OpenJDK build to explicitly enable the GSettings API.
- Resolves: rhbz#1235158

[1:1.7.0.80-2.6.0.0]
- Add GConf2-devel dependency for native proxy fallback support.
- Remove libxslt dependency pulled in from IcedTea builds.
- Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)
- Resolves: rhbz#1235158

[1:1.7.0.80-2.6.0.0]
- Bump to 2.6.0 and u80b32.
- Drop upstreamed patches and separate AArch64 HotSpot.
- Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
- Only run -Xshare:dump on JIT archs other than power64 as port lacks support
- Update remove-intree-libraries script to cover LCMS and PCSC headers and SunEC.
- Resolves: rhbz#1235158

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 java-1.7.0-openjdk 1:1.7.0.85-2.6.1.3.0.1.el6_6
Oracle Linux · 7 java-1.7.0-openjdk-accessibility 1:1.7.0.85-2.6.1.2.0.1.el7_1
Oracle Linux · 7 java-1.7.0-openjdk-demo 1:1.7.0.85-2.6.1.3.0.1.el6_6
Oracle Linux · 7 java-1.7.0-openjdk-devel 1:1.7.0.85-2.6.1.3.0.1.el6_6
Oracle Linux · 7 java-1.7.0-openjdk-headless 1:1.7.0.85-2.6.1.2.0.1.el7_1
Oracle Linux · 7 java-1.7.0-openjdk-javadoc 1:1.7.0.85-2.6.1.3.0.1.el6_6
Oracle Linux · 7 java-1.7.0-openjdk-src 1:1.7.0.85-2.6.1.3.0.1.el6_6

Vulnerabilities 14