Red Hat Security Advisory: java-1.7.0-oracle security update

Fixed packages 18

Vulnerabilities 8

• Unscored —
  CVE-2015-7575

  Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…

  thunderbird firefox openssl openjdk-7 Debian Ubuntu
  Jan 9, 2016
• Unscored —
  CVE-2015-8126 EPSS 10%

  Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2…

  fltk libpng Ubuntu Azure Linux
  Nov 13, 2015
• Unscored —
  CVE-2015-8472

  Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x befor…

  fltk libpng1.6 libpng Debian Ubuntu Azure Linux
  Jan 21, 2016
• Unscored —
  CVE-2016-0402

  Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

  openjdk-7 openjdk-6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0448

  Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and J…

  openjdk-7 openjdk-6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0466

  Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8…

  openjdk-7 openjdk-6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0483 EPSS 15%

  Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows re…

  openjdk-7 openjdk-6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0494

  Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

  openjdk-7 openjdk-6 icu icu Debian Ubuntu
  Jan 21, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixJAVA
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1281756
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1289841
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1298906
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1298957
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1299073
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1299385
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1299441
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0056.json
• report
  https://access.redhat.com/security/cve/CVE-2015-7575
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-7575
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-7575
• article
  http://www.mitls.org/pages/attacks/SLOTH
• article
  https://access.redhat.com/articles/2112261
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/
• report
  https://access.redhat.com/security/cve/CVE-2015-8126
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8126
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8126
• report
  https://access.redhat.com/security/cve/CVE-2015-8472
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8472
• report
  https://access.redhat.com/security/cve/CVE-2016-0402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0402
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0402
• report
  https://access.redhat.com/security/cve/CVE-2016-0448
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0448
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0448
• report
  https://access.redhat.com/security/cve/CVE-2016-0466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0466
• report
  https://access.redhat.com/security/cve/CVE-2016-0483
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0483
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0483
• report
  https://access.redhat.com/security/cve/CVE-2016-0494
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-0494
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-0494