Skip to content
OpenAdvisories
Unscored RHSA-2014:1657 20 CVEs

Red Hat Security Advisory: java-1.7.0-oracle security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle 1:1.7.0.72-1jpp.4.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-devel 1:1.7.0.72-1jpp.4.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-javafx 1:1.7.0.72-1jpp.4.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-jdbc 1:1.7.0.72-1jpp.4.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-plugin 1:1.7.0.72-1jpp.4.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-src 1:1.7.0.72-1jpp.4.el5_11
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle 1:1.7.0.72-1jpp.2.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-devel 1:1.7.0.72-1jpp.2.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-javafx 1:1.7.0.72-1jpp.2.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-jdbc 1:1.7.0.72-1jpp.2.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-plugin 1:1.7.0.72-1jpp.2.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-src 1:1.7.0.72-1jpp.2.el6
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle 1:1.7.0.72-1jpp.2.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-devel 1:1.7.0.72-1jpp.2.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-javafx 1:1.7.0.72-1jpp.2.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-jdbc 1:1.7.0.72-1jpp.2.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-plugin 1:1.7.0.72-1jpp.2.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-src 1:1.7.0.72-1jpp.2.el7

Vulnerabilities 20

  • Unscored —
    CVE-2014-4288

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, int…

  • Unscored —
    CVE-2014-6456

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity,…

  • Unscored —
    CVE-2014-6457

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, a…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6458

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrit…

  • Unscored —
    CVE-2014-6476

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vecto…

  • Unscored —
    CVE-2014-6492

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to a…

  • Unscored —
    CVE-2014-6493

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, int…

  • Unscored —
    CVE-2014-6502

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6503

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, int…

  • Unscored —
    CVE-2014-6504

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6506

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6511

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6512

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6515

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknow…

  • Unscored —
    CVE-2014-6517

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6519

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6527

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vecto…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-6531

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6532

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, int…

  • Unscored —
    CVE-2014-6558

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixJAVA
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1071210
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150182
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150273
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150651
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151046
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151364
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151517
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152756
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152760
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152765
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152766
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152767
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1657.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-4288
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4288
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4288
  • report
    https://access.redhat.com/security/cve/CVE-2014-6456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6456
  • report
    https://access.redhat.com/security/cve/CVE-2014-6457
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6457
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6457
  • report
    https://access.redhat.com/security/cve/CVE-2014-6458
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6458
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6458
  • report
    https://access.redhat.com/security/cve/CVE-2014-6476
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6476
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6476
  • report
    https://access.redhat.com/security/cve/CVE-2014-6492