Skip to content
OpenAdvisories
Unscored RHSA-2015:0809 8 CVEs

Red Hat Security Advisory: java-1.8.0-openjdk security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 60

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-debuginfo 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-demo 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-devel 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-headless 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-javadoc 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client java-1.8.0-openjdk-src 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-debuginfo 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-demo 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-devel 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-headless 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-javadoc 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode java-1.8.0-openjdk-src 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-debuginfo 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-demo 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-devel 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-headless 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-javadoc 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server java-1.8.0-openjdk-src 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-debuginfo 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-demo 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-devel 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-headless 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-javadoc 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation java-1.8.0-openjdk-src 1:1.8.0.45-28.b13.el6_6
Red Hat · RHEL 7 enterprise_linux:7::client java-1.8.0-openjdk 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client java-1.8.0-openjdk-accessibility 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client java-1.8.0-openjdk-debuginfo 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client java-1.8.0-openjdk-demo 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client java-1.8.0-openjdk-devel 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client java-1.8.0-openjdk-headless 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client java-1.8.0-openjdk-javadoc 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client java-1.8.0-openjdk-src 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode java-1.8.0-openjdk 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode java-1.8.0-openjdk-accessibility 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode java-1.8.0-openjdk-debuginfo 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode java-1.8.0-openjdk-demo 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode java-1.8.0-openjdk-devel 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode java-1.8.0-openjdk-headless 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode java-1.8.0-openjdk-javadoc 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode java-1.8.0-openjdk-src 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server java-1.8.0-openjdk 1:1.8.0.45-30.b13.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server java-1.8.0-openjdk-accessibility 1:1.8.0.45-30.b13.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server java-1.8.0-openjdk-debuginfo 1:1.8.0.45-30.b13.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server java-1.8.0-openjdk-demo 1:1.8.0.45-30.b13.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server java-1.8.0-openjdk-devel 1:1.8.0.45-30.b13.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server java-1.8.0-openjdk-headless 1:1.8.0.45-30.b13.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server java-1.8.0-openjdk-javadoc 1:1.8.0.45-30.b13.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server java-1.8.0-openjdk-src 1:1.8.0.45-30.b13.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::workstation java-1.8.0-openjdk 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation java-1.8.0-openjdk-accessibility 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation java-1.8.0-openjdk-debuginfo 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation java-1.8.0-openjdk-demo 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation java-1.8.0-openjdk-devel 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation java-1.8.0-openjdk-headless 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation java-1.8.0-openjdk-javadoc 1:1.8.0.45-30.b13.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation java-1.8.0-openjdk-src 1:1.8.0.45-30.b13.el7_1

Vulnerabilities 8

  • Unscored —
    CVE-2005-1080

    Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0460

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0469

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0470

    Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors relate…

  • Unscored —
    CVE-2015-0477

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity vi…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0478

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0480

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0488

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=606442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1210355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1210829
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211285
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211299
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211387
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211504
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211543
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0809.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-1080
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1080
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1080
  • report
    https://access.redhat.com/security/cve/CVE-2015-0460
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0460
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0460
  • article
    http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA
  • report
    https://access.redhat.com/security/cve/CVE-2015-0469
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0469
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0469
  • report
    https://access.redhat.com/security/cve/CVE-2015-0470
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0470
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0470
  • report
    https://access.redhat.com/security/cve/CVE-2015-0477
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0477
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0477
  • report
    https://access.redhat.com/security/cve/CVE-2015-0478
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0478
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0478
  • article
    https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf
  • article
    https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/
  • report
    https://access.redhat.com/security/cve/CVE-2015-0480
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0480
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0480
  • report
    https://access.redhat.com/security/cve/CVE-2015-0488
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0488
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0488