Skip to content
OpenAdvisories
Unscored RHSA-2013:1451 29 CVEs

Red Hat Security Advisory: java-1.7.0-openjdk security update

Published Sep 29, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client java-1.7.0-openjdk 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client java-1.7.0-openjdk-debuginfo 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client java-1.7.0-openjdk-demo 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client java-1.7.0-openjdk-devel 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client java-1.7.0-openjdk-javadoc 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client java-1.7.0-openjdk-src 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.7.0-openjdk 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.7.0-openjdk-debuginfo 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.7.0-openjdk-demo 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.7.0-openjdk-devel 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.7.0-openjdk-javadoc 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.7.0-openjdk-src 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server java-1.7.0-openjdk 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server java-1.7.0-openjdk-debuginfo 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server java-1.7.0-openjdk-demo 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server java-1.7.0-openjdk-devel 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server java-1.7.0-openjdk-javadoc 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server java-1.7.0-openjdk-src 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.7.0-openjdk 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.7.0-openjdk-debuginfo 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.7.0-openjdk-demo 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.7.0-openjdk-devel 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.7.0-openjdk-javadoc 1:1.7.0.45-2.4.3.2.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.7.0-openjdk-src 1:1.7.0.45-2.4.3.2.el6_4

Vulnerabilities 29

  • Unscored —
    CVE-2013-3829

    Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java S…

  • High —
    CVE-2013-4002 Public exploit EPSS 25%

    Missing XML Validation in Apache Xerces2

    XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u6…

    xerces:xercesImpl Maven
  • Unscored —
    CVE-2013-5772

    Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earl…

  • Unscored —
    CVE-2013-5774

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 a…

  • Unscored —
    CVE-2013-5778

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 a…

  • Unscored —
    CVE-2013-5780

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5782

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5783

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5784

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —
    CVE-2013-5790

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5797

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5800

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attack…

  • Unscored —
    CVE-2013-5802

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5803

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5804

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5809

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5814

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5817

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5820

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Medium —
    CVE-2013-5823

    Apache XML Security For Java vulnerable to Infinite Loop

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related …

    org.apache.santuario:xmlsec Maven
  • Unscored —
    CVE-2013-5825

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5829

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5830

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —
    CVE-2013-5838

    Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote atta…

  • Unscored —
    CVE-2013-5840

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5842 Public exploit EPSS 18%

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5849

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5850

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —
    CVE-2013-5851

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attack…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018717
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018720
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018727
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018755
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018785
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018831
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018977
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018984
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019108
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019110
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019113
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019115
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019117
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019123
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019127
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019130
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019133
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019139
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019147
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1019300
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1451.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-3829
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-3829
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-3829
  • article
    http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-4002
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4002
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4002
  • report
    https://access.redhat.com/security/cve/CVE-2013-5772