Skip to content
OpenAdvisories
Unscored RHSA-2013:1440 49 CVEs

Red Hat Security Advisory: java-1.7.0-oracle security update

Published Sep 29, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-oracle 1:1.7.0.45-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-oracle-devel 1:1.7.0.45-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-oracle-javafx 1:1.7.0.45-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-oracle-jdbc 1:1.7.0.45-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-oracle-plugin 1:1.7.0.45-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-oracle-src 1:1.7.0.45-1jpp.1.el5_10
Red Hat · RHEL 6 rhel_extras:6 java-1.7.0-oracle 1:1.7.0.45-1jpp.2.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.7.0-oracle-devel 1:1.7.0.45-1jpp.2.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.7.0-oracle-javafx 1:1.7.0.45-1jpp.2.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.7.0-oracle-jdbc 1:1.7.0.45-1jpp.2.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.7.0-oracle-plugin 1:1.7.0.45-1jpp.2.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.7.0-oracle-src 1:1.7.0.45-1jpp.2.el6_4

Vulnerabilities 49

  • Unscored —
    CVE-2013-3829

    Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java S…

  • High —
    CVE-2013-4002 Public exploit EPSS 25%

    Missing XML Validation in Apache Xerces2

    XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u6…

    xerces:xercesImpl Maven
  • Unscored —
    CVE-2013-5772

    Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earl…

  • Unscored —
    CVE-2013-5774

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 a…

  • Unscored —
    CVE-2013-5775

    Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and…

  • Unscored —
    CVE-2013-5776

    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Ja…

  • Unscored —
    CVE-2013-5777

    Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and…

  • Unscored —
    CVE-2013-5778

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 a…

  • Unscored —
    CVE-2013-5780

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5782

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5783

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5784

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5787

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5788

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attack…

  • Unscored —
    CVE-2013-5789

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5790

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5797

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5800

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attack…

  • Unscored —
    CVE-2013-5801

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5802

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5803

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5804

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5809

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5810

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to a…

  • Unscored —
    CVE-2013-5812

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5814

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5817

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5818

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5819

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5820

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Medium —
    CVE-2013-5823

    Apache XML Security For Java vulnerable to Infinite Loop

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related …

    org.apache.santuario:xmlsec Maven
  • Unscored —
    CVE-2013-5824

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5825

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5829

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5830

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5831

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5832

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5838

    Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote atta…

  • Unscored —
    CVE-2013-5840

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5842 Public exploit EPSS 18%

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5843

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, Jav…

  • Unscored —
    CVE-2013-5844

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to a…

  • Unscored —
    CVE-2013-5846

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows remote attackers to…

  • Unscored —
    CVE-2013-5848

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier a…

  • Unscored —
    CVE-2013-5849

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5850

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5851

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attack…

  • Unscored —
    CVE-2013-5852

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5854

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to a…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
  • article
    http://www.oracle.com/technetwork/java/javase/7u45-relnotes-2016950.html
  • article
    http://www.oracle.com/technetwork/java/javase/7u40-relnotes-2004172.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018717
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018720
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018727
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018755
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018785
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018831
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018977
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018984
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019108
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019110
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019113
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019115
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019117
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019123
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019127
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019130
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019133
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019139
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019147
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019300
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019692
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019697
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019701
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019702