Red Hat Security Advisory: java-1.7.1-ibm security update

Fixed packages 6

Vulnerabilities 54

• Medium 6.5
  CVE-2013-6954

  The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL po…

  Jan 12, 2014
• Unscored —
  CVE-2013-5878

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers…

  Jan 15, 2014
• Unscored —
  CVE-2013-5884

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote …

  Jan 15, 2014
• Unscored —
  CVE-2013-5887

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown ve…

  Jan 15, 2014
• Unscored —
  CVE-2013-5888

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confid…

  Jan 15, 2014
• Unscored —
  CVE-2013-5889

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity,…

  Jan 15, 2014
• Unscored —
  CVE-2013-5896

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote …

  Jan 15, 2014
• Unscored —
  CVE-2013-5898

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integri…

  Jan 15, 2014
• Unscored —
  CVE-2013-5899

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality via unknown…

  Jan 15, 2014
• Unscored —
  CVE-2013-5907

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45;…

  Jan 15, 2014
• Unscored —
  CVE-2013-5910

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers…

  Jan 15, 2014
• Unscored —
  CVE-2013-6629

  The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome befo…

  libjpeg-turbo Debian
  Nov 15, 2013
• Unscored —
  CVE-2014-0368

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers …

  Jan 15, 2014
• Unscored —
  CVE-2014-0373

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect co…

  Jan 15, 2014
• Unscored —
  CVE-2014-0375

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integri…

  Jan 15, 2014
• Unscored —
  CVE-2014-0376

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote …

  Jan 15, 2014
• Unscored —
  CVE-2014-0387

  Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to …

  Jan 15, 2014
• Unscored —
  CVE-2014-0403

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integri…

  Jan 15, 2014
• Unscored —
  CVE-2014-0410

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity,…

  Jan 15, 2014
• Unscored —
  CVE-2014-0411

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45;…

  Jan 15, 2014
• Unscored —
  CVE-2014-0415

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity,…

  Jan 15, 2014
• Unscored —
  CVE-2014-0416

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote …

  Jan 15, 2014
• Unscored —
  CVE-2014-0417

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows rem…

  Jan 15, 2014
• Unscored —
  CVE-2014-0422

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote …

  Jan 15, 2014
• Unscored —
  CVE-2014-0423

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45;…

  Jan 15, 2014
• Unscored —
  CVE-2014-0424

  Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity,…

  Jan 15, 2014
• Unscored —
  CVE-2014-0428

  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote …

  Jan 15, 2014
• Unscored —
  CVE-2014-0429

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

  openjdk-7 Ubuntu
  Apr 15, 2014
• Unscored —
  CVE-2014-0446

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

  openjdk-7 Ubuntu
  Apr 15, 2014
• Unscored —
  CVE-2014-0448

  Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, an…

  Apr 15, 2014
• Unscored —
  CVE-2014-0449

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  Apr 15, 2014
• Unscored —
  CVE-2014-0451

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0452

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0453

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0454

  Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0455

  Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0457

  Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embe…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0458

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0459

  Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect av…

  openjdk-7 lcms2 lcms2 Debian Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0460

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0461

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-0878

  The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edit…

  May 26, 2014
• Unscored —
  CVE-2014-1876

  The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7…

  openjdk-7 Ubuntu
  Feb 10, 2014
• Unscored —
  CVE-2014-2398

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 a…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-2401

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows …

  Apr 16, 2014
• Unscored —
  CVE-2014-2402

  Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect co…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-2409

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  Apr 16, 2014
• Unscored —
  CVE-2014-2412

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote atta…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-2414

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-2420

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  Apr 16, 2014
• Unscored —
  CVE-2014-2421

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows …

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-2423

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-2427

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

  openjdk-7 Ubuntu
  Apr 16, 2014
• Unscored —
  CVE-2014-2428

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  Apr 16, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://www.ibm.com/developerworks/java/jdk/alerts/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1031734
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1045561
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1051519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1051528
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1051699
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1051823
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1051911
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1051912
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1051923
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1052915
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1052919
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1052942
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053010
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053066
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053266
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053495
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053496
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053499
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053501
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053502
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053504
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053507
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053508
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053515
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053516
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053517
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1053518
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1060907
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1086632
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1086645
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1087409
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1087411
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1087417
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1087424
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1087426
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1087427
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1087428