Skip to content
OpenAdvisories
High ELSA-2015-1919 18 CVEs

Important: java-1.8.0-openjdk security update (Oracle Linux 7)

Published Oct 21, 2015 · Updated Oct 21, 2015

Ecosystem: Oracle Linux

Summary

[1:1.8.0.65-0.b17]
- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654

[1:1.8.0.51-4.b16]
- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197

[1:1.8.0.60-4.b27]
- updated to u60 (1255352)
- Resolves: rhbz#1257654

Fixed packages 13

ReleasePackageFixed in
Oracle Linux · 7 java-1.8.0-openjdk 1:1.8.0.65-2.b17.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-accessibility 1:1.8.0.65-2.b17.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-debug 1:1.8.0.65-0.b17.el6_7
Oracle Linux · 7 java-1.8.0-openjdk-demo 1:1.8.0.65-2.b17.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-demo-debug 1:1.8.0.65-0.b17.el6_7
Oracle Linux · 7 java-1.8.0-openjdk-devel 1:1.8.0.65-2.b17.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-devel-debug 1:1.8.0.65-0.b17.el6_7
Oracle Linux · 7 java-1.8.0-openjdk-headless 1:1.8.0.65-2.b17.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-headless-debug 1:1.8.0.65-0.b17.el6_7
Oracle Linux · 7 java-1.8.0-openjdk-javadoc 1:1.8.0.65-2.b17.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-javadoc-debug 1:1.8.0.65-0.b17.el6_7
Oracle Linux · 7 java-1.8.0-openjdk-src 1:1.8.0.65-2.b17.el7_1
Oracle Linux · 7 java-1.8.0-openjdk-src-debug 1:1.8.0.65-0.b17.el6_7

Vulnerabilities 18

  • Unscored —
    CVE-2015-4734

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4803

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows re…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4805

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4806

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4835

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4840

    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2015-4842

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4843 Public exploit

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4844

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2015-4860

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4868

    Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidenti…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2015-4872

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows re…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4881

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4882

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4883

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4893

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows re…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4903

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4911

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows re…

    openjdk-7 openjdk-6 Ubuntu