Skip to content
OpenAdvisories
Unscored RHSA-2015:0857 12 CVEs

Red Hat Security Advisory: java-1.7.0-oracle security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle 1:1.7.0.79-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-devel 1:1.7.0.79-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-javafx 1:1.7.0.79-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-jdbc 1:1.7.0.79-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-plugin 1:1.7.0.79-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.7.0-oracle-src 1:1.7.0.79-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle 1:1.7.0.79-1jpp.1.el6_6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-devel 1:1.7.0.79-1jpp.1.el6_6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-javafx 1:1.7.0.79-1jpp.1.el6_6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-jdbc 1:1.7.0.79-1jpp.1.el6_6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-plugin 1:1.7.0.79-1jpp.1.el6_6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.7.0-oracle-src 1:1.7.0.79-1jpp.1.el6_6
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle 1:1.7.0.79-1jpp.1.el7_1
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-devel 1:1.7.0.79-1jpp.1.el7_1
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-javafx 1:1.7.0.79-1jpp.1.el7_1
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-jdbc 1:1.7.0.79-1jpp.1.el7_1
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-plugin 1:1.7.0.79-1jpp.1.el7_1
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.7.0-oracle-src 1:1.7.0.79-1jpp.1.el7_1

Vulnerabilities 12

  • Unscored —
    CVE-2005-1080

    Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0458

    Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, …

  • Unscored —
    CVE-2015-0459

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to…

  • Unscored —
    CVE-2015-0460

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0469

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0477

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity vi…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0478

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0480

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0484

    Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confid…

  • Unscored —
    CVE-2015-0488

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0491

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers t…

  • Unscored —
    CVE-2015-0492

    Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confide…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=606442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1210355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1210829
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211285
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211299
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211504
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211543
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211768
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211769
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211770
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211773
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0857.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-1080
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1080
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1080
  • report
    https://access.redhat.com/security/cve/CVE-2015-0458
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0458
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0458
  • report
    https://access.redhat.com/security/cve/CVE-2015-0459
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0459
  • report
    https://access.redhat.com/security/cve/CVE-2015-0460
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0460
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0460
  • report
    https://access.redhat.com/security/cve/CVE-2015-0469
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0469
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0469
  • report
    https://access.redhat.com/security/cve/CVE-2015-0477
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0477
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0477
  • report
    https://access.redhat.com/security/cve/CVE-2015-0478
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0478
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0478
  • article
    https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf
  • article
    https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/
  • report
    https://access.redhat.com/security/cve/CVE-2015-0480