Skip to content
OpenAdvisories
Low RHSA-2014:1880 19 CVEs

Red Hat Security Advisory: java-1.7.1-ibm security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 6 rhel_extras:6 java-1.7.1-ibm 1:1.7.1.2.0-1jpp.3.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.7.1-ibm-demo 1:1.7.1.2.0-1jpp.3.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.7.1-ibm-devel 1:1.7.1.2.0-1jpp.3.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.7.1-ibm-jdbc 1:1.7.1.2.0-1jpp.3.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.7.1-ibm-plugin 1:1.7.1.2.0-1jpp.3.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.7.1-ibm-src 1:1.7.1.2.0-1jpp.3.el6_6
Red Hat · RHEL 7 rhel_extras:7 java-1.7.1-ibm 1:1.7.1.2.0-1jpp.3.el7_0
Red Hat · RHEL 7 rhel_extras:7 java-1.7.1-ibm-demo 1:1.7.1.2.0-1jpp.3.el7_0
Red Hat · RHEL 7 rhel_extras:7 java-1.7.1-ibm-devel 1:1.7.1.2.0-1jpp.3.el7_0
Red Hat · RHEL 7 rhel_extras:7 java-1.7.1-ibm-jdbc 1:1.7.1.2.0-1jpp.3.el7_0
Red Hat · RHEL 7 rhel_extras:7 java-1.7.1-ibm-plugin 1:1.7.1.2.0-1jpp.3.el7_0
Red Hat · RHEL 7 rhel_extras:7 java-1.7.1-ibm-src 1:1.7.1.2.0-1jpp.3.el7_0

Vulnerabilities 19

  • Low 3.4
    CVE-2014-3566 Public exploit EPSS 100%

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

    openssl openssl openjdk-7 wolfssl Debian Ubuntu
  • Unscored —
    CVE-2014-3065

    Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1…

  • Unscored —
    CVE-2014-4288

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, int…

  • Unscored —
    CVE-2014-6456

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity,…

  • Unscored —
    CVE-2014-6457

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, a…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6458

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrit…

  • Unscored —
    CVE-2014-6476

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vecto…

  • Unscored —
    CVE-2014-6492

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to a…

  • Unscored —
    CVE-2014-6493

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, int…

  • Unscored —
    CVE-2014-6502

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6503

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, int…

  • Unscored —
    CVE-2014-6506

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6511

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6512

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6515

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknow…

  • Unscored —
    CVE-2014-6527

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vecto…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-6531

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6532

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, int…

  • Unscored —
    CVE-2014-6558

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.ibm.com/developerworks/java/jdk/alerts/
  • article
    https://www-01.ibm.com/support/docview.wss?uid=swg21688165
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1071210
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150651
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151046
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151517
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152756
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152760
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152765
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152766
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152767
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1162554
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1880.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3065
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3065
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3065
  • report
    https://access.redhat.com/security/cve/CVE-2014-3566
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3566
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3566
  • report
    https://access.redhat.com/security/cve/CVE-2014-4288
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4288
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4288
  • article
    http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixJAVA
  • report
    https://access.redhat.com/security/cve/CVE-2014-6456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6456
  • report
    https://access.redhat.com/security/cve/CVE-2014-6457
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6457
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6457