Red Hat Security Advisory: java-1.8.0-oracle security update

Fixed packages 12

Vulnerabilities 23

• Critical 9.8
  CVE-2015-2590 Exploited EPSS 25%

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote atta…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015

  KEV Mar 3, 2022
• Low 3.7
  CVE-2015-2808 EPSS 74%

  The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data dur…

  openjdk-7 openjdk-6 Ubuntu
  Apr 1, 2015
• Low 3.7
  CVE-2015-4000 Public exploit EPSS 100%

  The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…

  thunderbird firefox openssl openssl Debian Ubuntu
  May 21, 2015
• Unscored —
  CVE-2015-2601

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 a…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2613

  Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers t…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2619

  Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows rem…

  Jul 16, 2015
• Unscored —
  CVE-2015-2621

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote att…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2625

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 a…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2627

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via …

  Jul 16, 2015
• Unscored —
  CVE-2015-2628

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote atta…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2632

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via …

  openjdk-7 openjdk-6 icu icu Debian Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2637

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 all…

  Jul 16, 2015
• Unscored —
  CVE-2015-2638

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 all…

  Jul 16, 2015
• Unscored —
  CVE-2015-2659

  Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availabili…

  Jul 16, 2015
• Unscored —
  CVE-2015-2664

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to affect confidentiality, integrit…

  Jul 16, 2015
• Unscored —
  CVE-2015-4729

  Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integri…

  Jul 16, 2015
• Unscored —
  CVE-2015-4731

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allo…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4732

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote atta…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4733

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote atta…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4736

  Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity,…

  Jul 16, 2015
• Unscored —
  CVE-2015-4748 EPSS 45%

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedd…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4749

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 a…

  openjdk-7 openjdk-6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4760

  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, int…

  openjdk-7 openjdk-6 icu icu Debian Ubuntu
  Jul 16, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1207101#c11
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223211#c33
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1207101
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223211
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1241965
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242019
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242144
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242232
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242234
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242275
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242281
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242372
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242394
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242447
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243139
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243283
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243284
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243286
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243287
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243290
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243291
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243300
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1241.json
• report
  https://access.redhat.com/security/cve/CVE-2015-2590
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-2590
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-2590
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2015-2601
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-2601
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-2601
• report
  https://access.redhat.com/security/cve/CVE-2015-2613
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-2613
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-2613
• report
  https://access.redhat.com/security/cve/CVE-2015-2619