Red Hat Security Advisory: java-1.7.0-openjdk security update

Fixed packages 24

Vulnerabilities 7

• Unscored —
  CVE-2015-4871

  Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via un…

  openjdk-7 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-7575

  Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…

  thunderbird firefox openssl openjdk-7 Debian Ubuntu
  Jan 9, 2016
• Unscored —
  CVE-2016-0402

  Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

  openjdk-7 openjdk-6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0448

  Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and J…

  openjdk-7 openjdk-6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0466

  Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8…

  openjdk-7 openjdk-6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0483 EPSS 15%

  Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows re…

  openjdk-7 openjdk-6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0494

  Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

  openjdk-7 openjdk-6 icu icu Debian Ubuntu
  Jan 21, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1273859
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1289841
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1298906
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1298957
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1299073
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1299385
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1299441
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0053.json
• report
  https://access.redhat.com/security/cve/CVE-2015-4871
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-4871
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-4871
• article
  http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA
• report
  https://access.redhat.com/security/cve/CVE-2015-7575
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-7575
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-7575
• article
  http://www.mitls.org/pages/attacks/SLOTH
• article
  https://access.redhat.com/articles/2112261
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/
• report
  https://access.redhat.com/security/cve/CVE-2016-0402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0402
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0402
• article
  http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixJAVA
• report
  https://access.redhat.com/security/cve/CVE-2016-0448
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0448
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0448
• report
  https://access.redhat.com/security/cve/CVE-2016-0466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0466
• report
  https://access.redhat.com/security/cve/CVE-2016-0483
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0483
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0483
• report
  https://access.redhat.com/security/cve/CVE-2016-0494
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0494
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0494