High ELSA-2016-0067 5 CVEs

Important: java-1.6.0-openjdk security update (Oracle Linux 7)

Published Jan 26, 2016 · Updated Jan 26, 2016

Ecosystem: Oracle Linux

Summary

[1.6.0.38-1.13.10.0.0.1]
- Add oracle-enterprise.patch

[1:1.6.0.38-1.13.10.0]
- Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
- Resolves: rhbz#1295772

[1:1.6.0.38-1.13.10.0]
- Update to IcedTea 1.13.10 & OpenJDK 6 b38.
- Resolves: rhbz#1295772

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	java-1.6.0-openjdk	1:1.6.0.38-1.13.10.0.0.1.el5_11
Oracle Linux · 7	java-1.6.0-openjdk-demo	1:1.6.0.38-1.13.10.0.0.1.el5_11
Oracle Linux · 7	java-1.6.0-openjdk-devel	1:1.6.0.38-1.13.10.0.0.1.el5_11
Oracle Linux · 7	java-1.6.0-openjdk-javadoc	1:1.6.0.38-1.13.10.0.0.1.el5_11
Oracle Linux · 7	java-1.6.0-openjdk-src	1:1.6.0.38-1.13.10.0.0.1.el5_11

Vulnerabilities 5

Unscored —

CVE-2016-0402

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

openjdk-7 openjdk-6 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0448

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and J…

openjdk-7 openjdk-6 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0466

Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8…

openjdk-7 openjdk-6 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0483 EPSS 15%

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows re…

openjdk-7 openjdk-6 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0494

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

openjdk-7 openjdk-6 icu icu Debian Ubuntu

Jan 21, 2016