Skip to content
OpenAdvisories
Low RHSA-2015:0069 14 CVEs

Red Hat Security Advisory: java-1.8.0-openjdk security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-debuginfo 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-demo 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-devel 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-headless 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-javadoc 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-src 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-debuginfo 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-demo 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-devel 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-headless 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-javadoc 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-src 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-debuginfo 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-demo 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-devel 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-headless 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-javadoc 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-src 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-debuginfo 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-demo 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-devel 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-headless 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-javadoc 1:1.8.0.31-1.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-src 1:1.8.0.31-1.b13.el6_6

Vulnerabilities 14

  • Low 3.4
    CVE-2014-3566 Public exploit EPSS 100%

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

    openssl openssl openjdk-7 wolfssl Debian Ubuntu
  • Unscored —
    CVE-2014-6549

    Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and avai…

  • Unscored —
    CVE-2014-6585

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-6587

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrit…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6591

    Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attacke…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-6593 Public exploit EPSS 66%

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6601

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, int…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0383

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R2…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0395

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0407

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0408

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0410

    Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0412

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, int…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0437

    Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and avai…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789#c82
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1123870
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183021
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183023
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183043
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183049
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183645
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183646
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183660
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183670
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183715
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0069.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3566
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3566
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3566
  • report
    https://access.redhat.com/security/cve/CVE-2014-6549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6549
  • article
    http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA
  • report
    https://access.redhat.com/security/cve/CVE-2014-6585
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6585
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6585
  • report
    https://access.redhat.com/security/cve/CVE-2014-6587
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6587
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6587
  • report
    https://access.redhat.com/security/cve/CVE-2014-6591
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6591
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6591
  • report
    https://access.redhat.com/security/cve/CVE-2014-6593
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6593
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6593
  • report
    https://access.redhat.com/security/cve/CVE-2014-6601
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6601
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6601